Lucene search

DellCVE-2022-34450

HistoryFeb 11, 2023 - 1:23 a.m.

CVE-2022-34450

2023-02-1101:23:25

CWE-183

dell

web.nvd.nist.gov

cve-2022-34450

powerpath management

appliance

privilege escalation

vulnerability

code execution

root access

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

Percentile

13.2%

JSON

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted control/code execution on the system as root.

Affected configurations

Nvd

Vulners

Node

dellpowerpath_management_applianceMatch3.3

VendorProductVersionCPE
dellpowerpath_management_appliance3.3cpe:2.3:a:dell:powerpath_management_appliance:3.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	powerpath_management_appliance	3.3	cpe:2.3:a:dell:powerpath_management_appliance:3.3:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerPath Management Appliance",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "3.3"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/000205404

CVSS3

6.7

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

Percentile

13.2%

JSON

Related for CVE-2022-34450