Dell PowerStore Path Traversal Vulnerability Allowing Arbitrary File Modification

A path traversal vulnerability has been identified in Dell PowerStore systems, specifically within the Service user context. This vulnerability allows a low-privileged attacker with local access to modify arbitrary system files. The issue affects multiple PowerStore models running versions prior to 4.4.0.0-2692403.

Impact

Exploitation of this vulnerability could lead to unauthorized modification of system files, potentially allowing for further attacks or system compromise.

Remediation

Users can upgrade to PowerStoreT OS version 4.4.0.0-2692403 or later. Instructions for downloading the update are available on the Dell PowerStore product support pages.