CVE-2026-70415
8.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Dell PowerStore SDNAS contains a Buffer Copy without Checking Size of Input vulnerability in the NFS/RPC. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Command execution and Denial of service.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Dell | PowerStore 500T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 1000T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 1200T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 3000T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 3200Q | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 3200T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 5000T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 5200Q | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 5200T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 7000T | 0 < 5.0.0.2-2761110 or later | affected |
| Dell | PowerStore 9000T | 0 < 5.0.0.2-2761110 or later | affected |
| Della | PowerStore 9200T | 0 < 5.0.0.2-2761110 or later | affected |
Weaknesses
- CWE-120: CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
References
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.