Impact
Dell Container Storage Modules versions prior to 1.18.0 use random values that are not sufficiently unpredictable. Based on the description, it is inferred that an attacker who can execute commands locally without authentication could exploit this weakness, potentially modifying system data or configuration. This could lead to unauthorized alteration of stored information, compromising integrity and possibly enabling further malicious activity.
Affected Systems
Dell Container Storage Modules. All releases earlier than version 1.18.0 are vulnerable.
Risk and Exploitability
The CVSS score of 7.7 indicates a high severity for this local vulnerability, but no EPSS score is available and it is not listed in the CISA KEV catalog. Based on the description, it is inferred that attackers need local access but do not need to authenticate, which lowers the barrier for exploitation. Once compromised, the attacker can tamper with information on the affected system.
OpenCVE Enrichment