CVE-2026-70415

Summary

Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to command execution and denial of service.

Affected Software

VendorProductVersion RangeStatus
DellPowerStore 500T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 1000T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 1200T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 3000T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 3200Q0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 3200T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 5000T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 5200Q0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 5200T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 7000T0 < 5.0.0.2-2761110 or lateraffected
DellPowerStore 9000T0 < 5.0.0.2-2761110 or lateraffected
DellaPowerStore 9200T0 < 5.0.0.2-2761110 or lateraffected

Weaknesses

  • CWE-120: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References