Dell patches 18 critical flaws that could hand attackers the keys to storage and Kubernetes

Dell disclosed 18 critical vulnerabilities in its Container Storage Modules (CSM, software extensions that connect to Kubernetes, a system for managing containerized applications) and System Update tool that could let attackers bypass authentication, gain root access (complete control of a system), and manipulate storage resources. Two vulnerabilities have the highest severity rating of 10 on the CVSS (Common Vulnerability Scoring System, a 0-10 scale measuring how serious a vulnerability is), with five others rated 9 or above, and Dell reports no evidence of active exploitation yet.