Dell PowerStore’s SMB/CIFS implementation contains an out‑of‑bounds write flaw that can be triggered by a specially crafted SMB packet. The vulnerability allows an unauthenticated remote attacker to corrupt memory, potentially causing a crash or enabling the delivery of malicious code. If the device is configured to restart automatically, the crash may become persistent, resulting in a denial of service. The type of weakness corresponds to CWE‑787, an out‑of‑bounds write.

The flaw affects all Dell PowerStore storage arrays in the 1000T, 1200T, 3000T, 3200Q, 3200T, 5000T, 500T, 5200Q, 5200T, 7000T, 9000T, and 9200T lines. No specific firmware revisions are listed, so any component running the SMB/CIFS services on these models is assumed vulnerable.

The vulnerability has a CVSS score of 9.8, indicating critical severity. EPSS data is unavailable, and it is not yet listed in CISA’s KEV catalog. Because the attack requires no prior authentication and can be performed over the network, the attack vector is remote. An attacker can send crafted SMB traffic from outside the trusted network, trigger a crash, and, with a more advanced payload, potentially achieve remote code execution.