Buffer Copy Issue in Dell PowerStore SDNAS NFS/RPC
CVE-2026-70415

8.1HIGH

Key Information:

Vendor

Dell
Status
Powerstore 500t
Powerstore 1000t
Powerstore 1200t
Powerstore 3000t
Vendor
CVE Published:
18 August 2026

What is CVE-2026-70415?

Dell PowerStore SDNAS suffers from a vulnerability in the NFS/RPC implementation, where a buffer copy operation occurs without adequately checking the size of the input. This flaw allows an unauthenticated remote attacker to potentially exploit the system, leading to command execution capabilities and scenarios of denial of service, compromising the overall integrity and availability of the affected product.

Affected Version(s)

PowerStore 1000T 0 < 5.0.0.2-2761110 or later

PowerStore 1200T 0 < 5.0.0.2-2761110 or later

PowerStore 3000T 0 < 5.0.0.2-2761110 or later

References

https://www.dell.com/support/kbdoc/en-us/000497829/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.