Description
Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Published: 2026-10-06
Score: 7.7 High
EPSS: < 1% Very Low
KEV: No
Impact: Information tampering
Action: Apply Patch
AI Analysis

Impact

Dell Container Storage Modules versions prior to 1.18.0 use random values that are not sufficiently unpredictable. Based on the description, it is inferred that an attacker who can execute commands locally without authentication could exploit this weakness, potentially modifying system data or configuration. This could lead to unauthorized alteration of stored information, compromising integrity and possibly enabling further malicious activity.

Affected Systems

Dell Container Storage Modules. All releases earlier than version 1.18.0 are vulnerable.

Risk and Exploitability

The CVSS score of 7.7 indicates a high severity for this local vulnerability, but no EPSS score is available and it is not listed in the CISA KEV catalog. Based on the description, it is inferred that attackers need local access but do not need to authenticate, which lowers the barrier for exploitation. Once compromised, the attacker can tamper with information on the affected system.

Generated by OpenCVE AI on October 6, 2026 at 18:43 UTC.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade Dell Container Storage Modules to version 1.18.0 or newer.
  • If an immediate upgrade is not possible, restrict local physical or network access to trusted personnel only.
  • Monitor logs for unauthorized data modification activity.

Generated by OpenCVE AI on October 6, 2026 at 18:43 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 20 Oct 2026 20:00:00 +0000

Type Values Removed Values Added
CPEs cpe:2.3:a:dell:container_storage_modules:*:*:*:*:*:*:*:*

Wed, 07 Oct 2026 07:45:00 +0000

Type Values Removed Values Added
First Time appeared Dell
Dell container Storage Modules
Vendors & Products Dell
Dell container Storage Modules

Tue, 06 Oct 2026 19:00:00 +0000

Type Values Removed Values Added
Title Insufficient Random Values Causing Information Tampering in Dell Container Storage Modules

Tue, 06 Oct 2026 15:30:00 +0000

Type Values Removed Values Added
Description Dell Container Storage Modules, versions prior to 1.18.0 contain(s) an Use of Insufficiently Random Values vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
Weaknesses CWE-330
References
Metrics cvssV3_1

{'score': 7.7, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H'}


Subscriptions

Dell Container Storage Modules
cve-icon MITRE

Status: PUBLISHED

Assigner: dell

Published:

Updated: 2026-10-06T19:30:04.529Z

Reserved: 2026-08-18T23:05:02.337Z

Link: CVE-2026-76105

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Analyzed

Published: 2026-10-06T16:17:10.000

Modified: 2026-10-20T19:40:18.127

Link: CVE-2026-76105

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-10-07T07:30:13Z

Weaknesses
  • CWE-330

    Use of Insufficiently Random Values