The PowerStore appliance exposes a path traversal flaw within its Service user account. An adversary who has local access and only low privileges can exploit this weakness to modify any system file unrelated to the Service user’s working directory. This grants the attacker the ability to alter critical configuration or operational files, compromising the integrity of the storage system.

Affected devices are Dell PowerStore appliances, including the PowerStore 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 500T, 5200Q, 5200T, 7000T, 9000T, and 9200T. No specific version data is provided.

The CVSS score of 4.4 reflects moderate severity because the vulnerability impacts only files accessible to the Service user. The EPSS score of less than 1% indicates that exploitation is unlikely to occur in the wild, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires local presence with a Service user account; this inference comes from the description stating a low privileged attacker with local access could potentially exploit the flaw.