Product:
PowerStore
Summary
PowerStore contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.4 | CVE-2026-28265 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate file paths to gain unauthorized access to system files. By leveraging the Path Traversal flaw, the attacker can modify or replace files that should be protected, potentially compromising the integrity of the system.
Affected Products
- PowerStore: Affected by a Path Traversal vulnerability allowing local attackers to modify system files.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Regularly review and restrict user access to sensitive system files to minimize the risk of exploitation.