Dell Container Storage Modules prior to version 1.18.0 contain an Improper Neutralization of Special Elements Used in a Template Engine flaw (CWE‑1336). The vulnerability allows a low‑privileged attacker with remote access to inject unsanitized template content, which can lead to escalation of privileges and give the attacker elevated control over the storage system.

All Dell Container Storage Modules running firmware versions earlier than 1.18.0 are affected. The specific impacted firmware revisions are not enumerated beyond the pre‑1.18.0 threshold, so any appliance identified as running a prior version should be treated as vulnerable.

The CVSS score of 9.6 reflects critical severity. Because the CVE description notes that a low‑privileged remote attacker can potentially exploit the flaw, the attack vector is remote network access to the module interface. EPSS data is unavailable, and the vulnerability is not listed in CISA’s KEV catalog, but the inherent risk remains high due to the ease of remote exploitation and the severe impact of privilege escalation.