Dell PowerStore Storage Multiple CVEs Advisory: OOB Write, Buffer Overflow, Auth Bypass

Vulnerability Overview Multiple security vulnerabilities exist in Dell PowerStore T series storage devices, which may be exploited by malicious actors to compromise the system. These vulnerabilities include: 1. CVE-2026-67271: An out-of-bounds write vulnerability in Dell PowerStore SDNAS, potentially leading to denial of service and remote code execution. 2. CVE-2026-70415: A buffer overflow vulnerability in Dell PowerStore SDNAS, potentially leading to command execution and denial of service. 3. CVE-2026-67262: An authorization bypass vulnerability in Dell PowerStore, potentially allowing circumvention of protective mechanisms. Affected Products The affected Dell PowerStore T series storage devices include: PowerStore 500T PowerStore 1000T PowerStore 1200T PowerStore 3000T PowerStore 3200Q PowerStore 3200T PowerStore 5000T PowerStore 5200Q PowerStore 5200T PowerStore 7000T PowerStore 9000T PowerStore 9200T Remediation Dell has released security updates to address the aforementioned vulnerabilities. Users are advised to upgrade to the following versions as soon as possible: PowerStore T OS: Version 5.0.0.2-276110 or later Specific upgrade links are provided below: PowerStore 500T PowerStore 1000T PowerStore 1200T PowerStore 3000T PowerStore 3200Q PowerStore 3200T PowerStore 5000T PowerStore 5200Q PowerStore 5200T PowerStore 7000T PowerStore 9000T PowerStore 9200T Additional Information CVSS Base Scores: - CVE-2026-67271: 9.8 - CVE-2026-70415: 8.1 - CVE-2026-67262: 8.8 CVSS Vector Strings: - CVE-2026-67271: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H - CVE-2026-70415: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H - CVE-2026-67262: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H Revision History: - Revision 1.0, released on 2026-08-10, initial release. Related Links: - Dell Security Advisories and Notifications - Dell Vulnerability Response Policy - CVSS Scoring Guide Legal Disclaimer: - The security advisory provided by Dell Technologies is for informational purposes only and does not constitute any warranty. Users should assess risks based on their own circumstances and take appropriate measures. Affected Products: - PowerStore 1000T, PowerStore 1200T, PowerStore 3000T, PowerStore 3200Q, PowerStore 3200T, PowerStore 5000T, PowerStore 500T, PowerStore 5200Q, PowerStore 5200T, PowerStore 7000T, PowerStore 9000T, PowerStore 9200T Product Category: - Software-Defined Storage, PowerStore, PowerStore 9000T, PowerStore 9200T Feedback: - Users can rate the article and provide feedback to help improve the content. --- The above is a summary of the key vulnerability information extracted from the webpage screenshot.

Goal Reached Thanks to every supporter — we hit 100%!

Dell PowerStore Storage Multiple CVEs Advisory: OOB Write, Buffer Overflow, Auth Bypass