Approved changes feed: RSS · Atom

cpe:2.3:a:dell:container_storage_modules:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductContainer Storage Modules (90310b84-ae58-524f-8a9f-d5bff62e9906)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/dell/csm purl2cpe 2026-06-01 10:16:13.695894

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-40711 vulnerable 2026-07-29 00:49:30.356056 Details available
HIGH (8)
Dell Dell Container Storage Modules, version(s) csi-powerstore v2.16.0, csi-unity v2.16.0, csi-powerflex v2.16.0, csi-powermax v2.16.0, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Command execution.
Published: 2026-06-26T12:31:00.184Z
Updated: 2026-06-26T12:47:26.963Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34427 vulnerable 2026-06-08 05:44:53.515009 Details available
HIGH (8.8)
Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker could exploit this vulnerability leading to modification of intended OS command execution.
Published: 2022-10-11T16:40:19.490Z
Updated: 2025-05-16T13:47:23.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34426 vulnerable 2026-06-08 05:44:53.514642 Details available
HIGH (8.8)
Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote unauthenticated attacker could exploit this vulnerability leading to unintentional access to path outside of restricted directory.
Published: 2022-10-11T16:40:18.421Z
Updated: 2025-05-16T13:47:43.100Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34375 vulnerable 2026-06-08 05:44:52.723784 Details available
HIGH (8.8)
Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to unintentional access to path outside of restricted directory.
Published: 2022-08-30T20:25:16.778Z
Updated: 2024-09-16T16:38:53.124Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-34374 vulnerable 2026-06-08 05:44:52.723382 Details available
HIGH (8.8)
Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to to execute arbitrary OS commands on the affected system.
Published: 2022-08-30T20:25:15.895Z
Updated: 2024-09-16T20:32:00.738Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.