Read the docs
TI-2026-42158 Aliases CVE-2026-58571GHSA-mxfv-63r7-pcpx

OS command injection in Dell PowerStore 500T

Priority MEDIUM 41CWE-78Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Dell PowerStore contains an OS Command Injection vulnerability. An authenticated user with limited privileges could potentially exploit this vulnerability to execute arbitrary commands with root privileges.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00748 55th percentileScored 2026-11-07
Fix Fixed PowerStore 500T (Dell): 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or laterPowerStore 1000T (Dell): 4.1.0.6-2771237 or later, 4.3.1.2-2771239 or later+10 more products

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellPowerStore 500Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 1000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 1200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 3000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 3200Qbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 3200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 5000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 5200Qbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 5200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 7000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 9000Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 9200Tbefore 4.1.0.6-2771237 or later4.1.0.6-2771237 or laterPatch availableCNA
DellPowerStore 500Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 1000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 1200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 3000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 3200Qbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 3200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 5000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 5200Qbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 5200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 7000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 9000Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
DellPowerStore 9200Tbefore 4.3.1.2-2771239 or later4.3.1.2-2771239 or laterPatch availableCNA
  • PowerStore 500T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 1000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 1200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 3000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 3200Q VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 3200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 5000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 5200Q VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 5200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 7000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 9000T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 9200T VendorDell Affected before 4.1.0.6-2771237 or later Fixed in 4.1.0.6-2771237 or later Patch available CNA
  • PowerStore 500T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 1000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 1200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 3000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 3200Q VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 3200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 5000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 5200Q VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 5200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 7000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 9000T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA
  • PowerStore 9200T VendorDell Affected before 4.3.1.2-2771239 or later Fixed in 4.3.1.2-2771239 or later Patch available CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:o:dell:powerstoreos:4.1.0.0:build_2435323:*:*:*:*:*:*4.1.0.0 build_2435323VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.1:build_2529516:*:*:*:*:*:*4.1.0.1 build_2529516VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.2:build_2567482:*:*:*:*:*:*4.1.0.2 build_2567482VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.3:build_2596462:*:*:*:*:*:*4.1.0.3 build_2596462VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.4:build_2633110:*:*:*:*:*:*4.1.0.4 build_2633110VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.1.0.5:build_2691357:*:*:*:*:*:*4.1.0.5 build_2691357VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.3.0.0:build_2611831:*:*:*:*:*:*4.3.0.0 build_2611831VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.3.1.0:build_2662695:*:*:*:*:*:*4.3.1.0 build_2662695VulnerableDell
cpe:2.3:o:dell:powerstoreos:4.3.1.1:build_2726662:*:*:*:*:*:*4.3.1.1 build_2726662VulnerableDell
cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.0:build_2435323:*:*:*:*:*:* Versions 4.1.0.0 build_2435323 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.1:build_2529516:*:*:*:*:*:* Versions 4.1.0.1 build_2529516 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.2:build_2567482:*:*:*:*:*:* Versions 4.1.0.2 build_2567482 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.3:build_2596462:*:*:*:*:*:* Versions 4.1.0.3 build_2596462 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.4:build_2633110:*:*:*:*:*:* Versions 4.1.0.4 build_2633110 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.1.0.5:build_2691357:*:*:*:*:*:* Versions 4.1.0.5 build_2691357 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.3.0.0:build_2611831:*:*:*:*:*:* Versions 4.3.0.0 build_2611831 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.3.1.0:build_2662695:*:*:*:*:*:* Versions 4.3.1.0 build_2662695 Vulnerable ·Dell
  • cpe:2.3:o:dell:powerstoreos:4.3.1.1:build_2726662:*:*:*:*:*:* Versions 4.3.1.1 build_2726662 Vulnerable ·Dell
  • cpe:2.3:h:dell:powerstore_1000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:*not specified by NVDRunning onDell
  • cpe:2.3:h:dell:powerstore_1200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_3000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_3200q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_3200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_5000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_500t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_5200q:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_5200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_7000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_9000t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell
  • cpe:2.3:h:dell:powerstore_9200t:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Dell

Remediation

  • Fix · CNA PowerStore 500T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 1000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 1200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 3000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 3200Q (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 3200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 5000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 5200Q (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 5200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 7000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 9000T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 9200T (Dell) Fixed in 4.1.0.6-2771237 or later
  • Fix · CNA PowerStore 500T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 1000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 1200T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 3000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 3200Q (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 3200T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 5000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 5200Q (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 5200T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 7000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 9000T (Dell) Fixed in 4.3.1.2-2771239 or later
  • Fix · CNA PowerStore 9200T (Dell) Fixed in 4.3.1.2-2771239 or later

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell PowerStore 1000T, PowerStore 1200T and 10 more products 4.3.1.2-2771239 or later

    13 records Highest priority Priority MEDIUM 11 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-55184 Missing authentication in Dell PowerStore 500TPriority MEDIUM 43
    • TI-2026-55183 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    • TI-2026-55181 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    Show all 13 records →
  • Release ·

    Dell PowerStore 1200T, PowerStore 3000T and 9 more products 4.1.0.6-2771237 or later

    12 records Highest priority Priority MEDIUM 10 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-55183 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    • TI-2026-55181 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    • TI-2026-55180 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    Show all 12 records →
Show 1 more group
  • Release ·

    Dell PowerStore 1000T 4.1.0.6-2771237 or later

    11 records Highest priority Priority MEDIUM 9 MEDIUM, 2 LOW

    Other records, highest priority first

    • TI-2026-55183 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    • TI-2026-55181 Protection mechanism failure in Dell PowerStore 500TPriority MEDIUM 41
    • TI-2026-55179 Command injection in Dell PowerStore 500TPriority MEDIUM 41
    Show all 11 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-58571
  2. 2026-10-03 Alias added: GHSA-mxfv-63r7-pcpx

References

Advisory 1

  • TI-2026-42160 Missing authentication in Dell PowerStore 500T CVSS 3.1CRITICAL 9.8
  • TI-2022-10113 Information disclosure in Dell PowerStore CVSS 3.1CRITICAL 9.8
  • TI-2026-55184 Missing authentication in Dell PowerStore 500T CVSS 3.1CRITICAL 10.0
  • TI-2022-10114 Authentication bypass in Dell PowerStore CVSS 3.1CRITICAL 9.8
  • TI-2026-55183 Protection mechanism failure in Dell PowerStore 500T CVSS 3.1HIGH 8.8
  • TI-2026-55181 Protection mechanism failure in Dell PowerStore 500T CVSS 3.1HIGH 8.8
See all 23 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences