high7.1

CVE-2024-51532

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability.

Impact

Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection') vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files.

Affected products

Vendor	Product	Affected versions
Dell	Powerstoreos	before 4.0.1.0

Weakness classification

CWE-88

References

NVD record
CVE.org record
https://www.dell.com/support/kbdoc/en-ie/000250483/dsa-2024-462-dell-powerstore-t-security-update-for-multiple-vulnerabilities