The vulnerability is a use of hard‑coded credentials in Dell Container Storage Modules. The credentials are stored in the csm‑docs component, allowing an attacker who can reach the system remotely and does not need valid local credentials to read sensitive information, potentially exposing configuration data, user data, or other confidential material. The flaw is categorized as CWE‑798.

Dell Container Storage Modules versions prior to 1.18.0 are affected. Any installation running an earlier revision contains hard‑coded credentials in the csm‑docs and is therefore vulnerable.

The CVSS score of 9.8 places this vulnerability in the very high severity band. The EPSS score is not available and the vulnerability is not listed in CISA’s KEV catalog, but the lack of those metrics does not diminish its potential impact. An unauthenticated attacker with remote access can exploit the flaw if the system is reachable, leading to permanent read access and disclosure of confidential data. Because the credentials are hard‑coded, exploitation does not require additional authentication steps, making the attack relatively straightforward for anyone with network reach.