Skip to content
OpenAdvisories
Medium · 6.4 CVE-2020-29499 EUVD-2020-21867GHSA-chjp-85fh-5fg7

Dell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability in PowerStore X environment . A locally a…

Published Jul 19, 2021 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell EMC PowerStore versions prior to 1.0.3.0.5.006 contain an OS Command Injection vulnerability in PowerStore X environment . A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.

Affected products

VendorProductAffectedFixed
Dell PowerStore unspecified – < PowerStore SW 1.0.3.0.5.006 PowerStore SW 1.0.3.0.5.006

References