CVE-2026-67271
CriticalCVSS 9.8Summary
Dell PowerStore SDNAS contains an out-of-bounds write vulnerability in the SMB/CIFS component. An unauthenticated attacker with remote access can send a specially crafted SMB packet, causing a crash or remote code execution.
Risk Assessment
The vulnerability can lead to denial of service (DoS) and remote code execution, posing a critical threat to system integrity and availability.
Recommendation
It is recommended to apply vendor-provided patches and restrict access to SMB/CIFS services to trusted networks only.
Original NVD description (English source)
Dell PowerStore SDNAS, contains an Out-of-bounds Write vulnerability in the SMB/CIFS. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Denial of service and Remote execution. This is a Critical vulnerability as a remote user could send a specially crafted SMB packet and cause a crash, that is persistent in case automatic restarts are enabled. Additionally, a more sophisticated attacker could use the same vulnerability for Remote Code execution.