Product:
PowerScale InsightIQ
Summary
Dell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. This could allow the attacker to gain unauthorized access to sensitive information and perform actions beyond their intended permissions.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-40638 |
Exploitation
To exploit this vulnerability, an attacker with local access must leverage their high privileges to execute malicious code or commands that take advantage of the unnecessary privileges granted by the system. This could involve manipulating system processes or configurations to escalate their privileges further, allowing them to access restricted areas of the system or perform unauthorized actions.
Affected Products
- PowerScale InsightIQ versions 5.0.0 through 6.2.0: These versions are vulnerable to an execution with unnecessary privileges, allowing for potential privilege escalation by local attackers.
Mitigation
To mitigate this vulnerability, users should update their PowerScale InsightIQ to the latest version that addresses this issue. Additionally, restricting local access to trusted personnel and implementing strict access controls can help reduce the risk of exploitation.