Описание
Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
Затрагиваемое ПО
Dell PowerstoreosDell Powerstore 1000tDell Powerstore 1200tDell Powerstore 3000tDell Powerstore 3200qDell Powerstore 3200tDell Powerstore 5000tDell Powerstore 500tDell Powerstore 5200tDell Powerstore 7000tDell Powerstore 9000tDell Powerstore 9200t
CVSS
| Балл | 7.1 — высокая |
| Вектор | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H |
Источники
https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities