Description
Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.
Published: 2026-08-26
Score: 5.3 Medium
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Dell PowerProtect One, versions 20.1.0.0 and below, contain a vulnerability that allows an unauthenticated attacker with remote access to potentially poison the system cache. This could compromise data integrity and disrupt operational performance.

Affected Systems

The affected product is Dell PowerProtect One, all releases up to and including version 20.1.0.0.

Risk and Exploitability

The CVSS score of 5.3 indicates moderate severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, unauthenticated access, requiring only remote connectivity to the system for exploitation. While no privileged access is needed, the attacker could still achieve a significant cache poisoning impact.

Generated by OpenCVE AI on August 26, 2026 at 20:42 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Apply the Dell security update for PowerProtect One as detailed in the Dell advisory.
  • Ensure your PowerProtect One deployment runs a version newer than 20.1.0.0 to eliminate the flaw.
  • If an update cannot be applied immediately, restrict remote access to the appliance using firewall or network segmentation, allowing only trusted IP ranges.

Generated by OpenCVE AI on August 26, 2026 at 20:42 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 15:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 26 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Title Cache Poisoning Vulnerability in Dell PowerProtect One

Wed, 26 Aug 2026 19:30:00 +0000

Type Values Removed Values Added
Description Dell PowerProtect One, versions 20.1.0.0 and below, contain a Reliance on Insufficiently Trustworthy Component vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Cache poisoning.
Weaknesses CWE-1357
References
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N'}

Subscriptions

No data.

cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-08-27T14:33:32.218Z

Reserved: 2026-07-29T11:04:32.679Z

Link: CVE-2026-67275

cve-icon Vulnrichment

Updated: 2026-08-27T14:27:20.387Z

cve-icon NVD

Status : Received

Published: 2026-08-26T20:17:57.267

Modified: 2026-08-27T17:19:34.233

Link: CVE-2026-67275

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-08-26T20:45:03Z

Weaknesses
  • CWE-1357

    Reliance on Insufficiently Trustworthy Component