A relative path traversal vulnerability in Dell Unisphere for PowerMax allows low privileged remote attackers to gain unauthorized modification capabilities over critical system files.

This vulnerability is a relative path traversal flaw (CWE-23) that permits an authenticated user with low privileges to manipulate file paths, potentially resulting in the unauthorized modification of system-critical files on the host.

The ability for a low privileged attacker to modify critical system files poses a severe risk to the integrity and availability of the storage management environment. With a CVSS score of 8.1, this high-severity flaw could allow an attacker to disrupt operations, escalate privileges, or cause significant system downtime, leading to potential data loss or long-term operational impact.

Immediate Action: Upgrade Dell Unisphere for PowerMax and PowerMax to version 10.3.0.1 or later to remediate the underlying path traversal flaw.

Proactive Monitoring: Monitor system access logs for unusual file modification patterns or attempts to access directories outside of the expected application scope.

Compensating Controls: Ensure that the Unisphere interface is restricted to trusted network segments and utilize network-level access controls to limit access to the management console.

Public Exploit Available: No (exploit_available: false)

Given the potential for system-level file modification, organizations should prioritize patching this vulnerability during the next maintenance window. The risk of unauthorized changes to critical system files makes this a high-priority item for any data center infrastructure team managing Dell PowerMax storage arrays.