Dell Container Storage Modules contain a Missing Authentication for Critical Function vulnerability, classified as CWE-306. An unauthenticated attacker who can reach the device remotely could exploit the flaw to elevate privileges, potentially gaining full control over the storage system. The CVSS score of 10 underscores the critical nature of the risk.

The affected product is Dell Container Storage Modules. All versions prior to 1.18.0 are vulnerable. No additional version data is supplied.

The absence of authentication means an attacker does not need credentials to exploit the flaw. The CVSS score indicates maximum severity, and the EPSS score is unavailable, so the precise exploitation frequency cannot be quantified, though the lack of a known KEV listing suggests no publicly released exploit yet. The likely attack vector is a remote network access to the module’s management interface, as inferred from the description of remote access enforcement.