Description

Dell PowerStore contains a Missing Authorization vulnerability. An attacker with access to a mapped host could exploit this vulnerability to read from or write to LUNs that the host is not authorized to access, bypassing per-initiator LUN access controls and leading to protection mechanism bypass.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "8.1",
  "pubDate": "2026-08-18T18:19:24.927Z",
  "pubdate": "2026-08-18T18:19:24.927Z",
  "executiveSummary": "A Missing Authorization vulnerability has been identified within Dell PowerStore. This security flaw allows an authenticated attacker who possesses access to a mapped host to successfully read from or write to Logical Unit Numbers (LUNs) for which the host lacks explicit authorization.\nThe primary impact of this vulnerability is a severe protection mechanism bypass, specifically subverting per-initiator LUN access controls implemented within the storage architecture. This breakdown in authorization enforcement compromises data segregation boundaries across multi-tenant or shared host environments.\nThe affected system is Dell PowerStore. The risk implications are critical, as unauthorized tenants or users sharing storage infrastructure can gain direct read and write access to sensitive block storage volumes, potentially leading to unauthorized data exposure, data tampering, or corruption.\nTo execute an exploitation vector against the target system, the attacker requires existing access to a mapped host within the storage environment. Leveraging this initial access, the malicious actor can bypass the intended authorization checks designed to restrict initiator-specific LUN mappings, directly interacting with restricted storage endpoints without requiring elevated administrative privileges.",
  "technicalDetails": "The root cause of the vulnerability stems from a Missing Authorization flaw within the access control logic of Dell PowerStore. Specifically, the storage controller fails to adequately validate whether a specific host initiator possesses the requisite permissions and mapping configurations to interact with a targeted LUN during I/O operations.\nIn a secure configuration, per-initiator LUN access controls restrict host visibility and I/O capabilities exclusively to explicitly mapped storage volumes. However, due to the authorization enforcement omission, the underlying storage subsystem processes read and write commands directed at unauthorized LUNs without verifying the legitimacy of the initiator-to-LUN binding.\nThe step-by-step attack flow proceeds as follows: First, an attacker establishes access to a legitimately mapped host that interfaces with the Dell PowerStore cluster. Second, rather than interacting solely with authorized storage resources, the attacker crafts or directs I/O requests, SCSI commands, or block-level operations toward LUN identifiers that are intentionally omitted from the host's permitted mapping configuration.\nThird, the vulnerable component on the storage controller processes the incoming requests. Because the authorization validation routine is missing or improperly implemented for these specific transaction paths, the system fails to intercept or reject the unauthorized command.\nFinally, the storage subsystem executes the read or write operations against the unauthorized LUN. Post-exploitation impact includes the arbitrary retrieval of sensitive enterprise data residing on restricted volumes or the unauthorized modification and destruction of data belonging to other workloads or hosts sharing the storage array."
}