CVE-2026-101215
MediumCVSS 6.6Summary
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an OS Command Injection vulnerability due to improper neutralization of special elements used in an OS command. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
Risk Assessment
A high privileged remote attacker could execute arbitrary operating system commands, leading to full compromise of the device. This may result in a serious security breach of the data storage infrastructure.
Recommendation
Update Dell Unisphere for PowerMax vApp to a patched version outside the 9.2.4.x range. Restrict remote access to the management interface and apply the principle of least privilege.
Other vulnerabilities in Dell Unisphere for PowerMax vApp
See all- CVE-2026-101217Medium
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) a Path Traversal vulnerability due to improper limitation of a pathname to a restricted directory. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to information disclosure.
- CVE-2026-101216Medium
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) a Command Injection vulnerability due to improper neutralization of special elements used in a command. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
- CVE-2022-34363Medium
Dell Unisphere for PowerMax vApp versions prior to 10.0.0.2 contain an authorization bypass vulnerability in the Unisphere for VMAX application running in vApp.
Original NVD description (English source)
Dell Unisphere for PowerMax vApp, version(s) 9.2.4.x, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Remote execution.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS