Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00336.

Exploitation none

Automatable yes

Technical Impact total

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor Product Default status Versions
Dell PowerStore 500T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 1000T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 1200T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 3000T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 3200Q unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 3200T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 5000T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 5200Q unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 5200T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 7000T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 9000T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 9200T unaffected
Version Status Constraints
0 affected < 4.1.0.6-2771237 or later
Dell PowerStore 500T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 1000T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 1200T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 3000T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 3200Q unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 3200T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 5000T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 5200Q unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 5200T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 7000T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 9000T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later
Dell PowerStore 9200T unaffected
Version Status Constraints
0 affected < 4.3.1.2-2771239 or later

No data.

No data.

OpenCVE Enrichment is a feature of OpenCVE that uses AI to automatically link vendors and products to CVEs. Learn more on GitHub.

Vendors Products
Dell Subscribe
Powerstore 1000t Subscribe
Powerstore 1200t Subscribe
Powerstore 3000t Subscribe
Powerstore 3200q Subscribe
Powerstore 3200t Subscribe
Powerstore 5000t Subscribe
Powerstore 500t Subscribe
Powerstore 5200q Subscribe
Powerstore 5200t Subscribe
Powerstore 7000t Subscribe
Powerstore 9000t Subscribe
Powerstore 9200t Subscribe

Project Subscriptions

Vendors Products
Dell Subscribe
Powerstore 1000t Subscribe
Powerstore 1200t Subscribe
Powerstore 3000t Subscribe
Powerstore 3200q Subscribe
Powerstore 3200t Subscribe
Powerstore 5000t Subscribe
Powerstore 500t Subscribe
Powerstore 5200q Subscribe
Powerstore 5200t Subscribe
Powerstore 7000t Subscribe
Powerstore 9000t Subscribe
Powerstore 9200t Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://www.dell.com/support/kbdoc/en-us/000497829/dsa-2026-330-dell-powerstore-t-security-update-for-multiple-vulnerabilities cve-icon cve-icon
History

Mon, 31 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Mon, 31 Aug 2026 08:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t
Vendors & Products Dell
Dell powerstore 1000t
Dell powerstore 1200t
Dell powerstore 3000t
Dell powerstore 3200q
Dell powerstore 3200t
Dell powerstore 5000t
Dell powerstore 500t
Dell powerstore 5200q
Dell powerstore 5200t
Dell powerstore 7000t
Dell powerstore 9000t
Dell powerstore 9200t

Mon, 31 Aug 2026 07:45:00 +0000

Type Values Removed Values Added
Title Missing Authentication in Dell PowerStore Management Interface

Mon, 31 Aug 2026 06:45:00 +0000

Type Values Removed Values Added
Description Dell PowerStore contains a Missing Authentication for Critical Function vulnerability. An unauthenticated attacker with network access to the restricted management interface could potentially exploit this vulnerability to read internal system information from the appliance filesystem. This is a Critical vulnerability as it could expose sensitive information and credentials which allow full administrative access to the array.
Weaknesses CWE-306
References
Metrics cvssV3_1

{'score': 9.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-08-31T14:33:06.554Z

Reserved: 2026-07-01T11:04:36.019Z

Link: CVE-2026-58574

cve-icon Vulnrichment

Updated: 2026-08-31T14:33:02.869Z

cve-icon NVD

Status : Received

Published: 2026-08-31T07:17:44.743

Modified: 2026-08-31T15:17:35.790

Link: CVE-2026-58574

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-31T08:30:17Z

Weaknesses