Dell Unisphere for PowerMax Improper XML External Entity Reference Vulnerability

A vulnerability allowing improper restriction of XML external entity references has been identified in Dell Unisphere for PowerMax versions 9.2.4.x. This vulnerability could be exploited by a low-privileged attacker with remote access, potentially leading to unauthorized access to data and resources outside of the intended control.

Impact

Exploitation of this vulnerability could result in unauthorized access to data and resources beyond the user's intended control.

Remediation

Users can upgrade to version 9.2.4.19 or later. For Unisphere for PowerMax Virtual Appliance, version 9.2.4.19 or later is recommended. Instructions for downloading the update are available on the Dell Unisphere for PowerMax drivers page.