PT-2024-10172 · Dell · Dell Powerstore T Os

Published 2024-09-16 · Updated 2024-09-16 · CVE-2024-42429

Positive Technologies (AI Summary)

CVSS v2.0

9.0

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell PowerStore T OS (affected versions not specified)

Description The issue is related to the lack of protection for the SQL query structure in the PowerStore T OS software. This could allow a remote attacker to read, modify, or delete data, or execute arbitrary commands.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

BDU:2025-00499

CVE-2024-42429

Affected Products

Dell Powerstore T Os

References · 5

• https://safe-surf.ru/upload/VULN-new/VULN.2024-12-27.1.pdf · Security Note
• https://bdu.fstec.ru/vul/2025-00499 · Security Note
• https://feedly.com/cve/CVE-2024-42429 · Note
• https://dell.com/support/kbdoc/nl-nl/000228610/dsa-2024-398-dell-powerstore-family-security-update-for-multiple-vulnerabilities · Note
• https://dell.com/support/kbdoc/en-us/000229094/dsa-2024-408-dell-powerstore-family-security-update-for-multiple-vulnerabilities · Note