Lucene search

[email protected]CVE-2022-33923

HistoryJul 21, 2022 - 4:15 a.m.

CVE-2022-33923

2022-07-2104:15:12

CWE-78

[email protected]

web.nvd.nist.gov

dell powerstore

os command injection

cve-2022-33923

security vulnerability

nvd

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.

Affected configurations

NVD

Node

dellemc_powerstore_500t_firmwareRange<3.0.0.0-1732745

AND

dellemc_powerstore_500tMatch-

Node

dellemc_powerstore_1200t_firmwareRange<3.0.0.0-1732745

AND

dellemc_powerstore_1200tMatch-

Node

dellemc_powerstore_3200t_firmwareRange<3.0.0.0-1732745

AND

dellemc_powerstore_3200tMatch-

Node

dellemc_powerstore_5200t_firmwareRange<3.0.0.0-1732745

AND

dellemc_powerstore_5200tMatch-

Node

dellemc_powerstore_9200t_firmwareRange<3.0.0.0-1732745

AND

dellemc_powerstore_9200tMatch-

CPENameOperatorVersion
dell:emc_powerstore_500t_firmwaredell emc powerstore 500t firmwarelt3.0.0.0-1732745

CPE	Name	Operator	Version
dell:emc_powerstore_500t_firmware	dell emc powerstore 500t firmware	lt	3.0.0.0-1732745

CNA Affected

[
  {
    "product": "PowerStore",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "3.0.0.0",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000201283

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.2%

JSON

Related for CVE-2022-33923

prion1 cvelist1 nvd1