CVE-2022-33923
Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.
- Score
- CVSS 3.1 7.8 High
- Status
- Modified - security_alert@emc.com
- Published
- 2022-07-21
- Last modified
- 2024-09-16
- Weaknesses
- CWE-78
Affected products
- Emc Powerstore 1200t Firmware (Dell)
- Emc Powerstore 3200t Firmware (Dell)
- Emc Powerstore 500t Firmware (Dell)
- Emc Powerstore 5200t Firmware (Dell)
- Emc Powerstore 9200t Firmware (Dell)
- Powerstore (Dell)
References
- https://www.dell.com/support/kbdoc/000201283
