Vulnerabilities

TI-2022-10112 CVE-2022-26868 · GHSA-x9m9-3xvj-c28p

OS command injection in Dell PowerStore

LOW 34

Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00403 Published 2022-06-02 Fixed in PowerStore SW v2.1.1.0 CWE-78

TI-2022-10111 CVE-2022-26867 · GHSA-w9qh-pvx2-rhmh

LOW 36

PowerStore SW v2.1.1.0 supports the option to export data to either a CSV or an XLSX file.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00608 Published 2022-06-02 Fixed in PowerStore SW v2.1.1.0 CWE-1236

TI-2022-10110 CVE-2022-26866 · GHSA-7h6f-6j9m-8x6g

LOW 25

Dell PowerStore Versions before v2.1.1.0.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00478 Published 2022-06-02 Fixed in PowerStore SW v2.1.1.0 CWE-79