Dell GeoDrive DLL Hijacking Vulnerability

Dell GeoDrive is a free application from Dell Inc. It provides access to Dell EMC ECS and Atmos storage from Microsoft Windows desktops and servers. A DLL hijacking vulnerability exists in Dell GeoDrive versions prior to 2.2.3, which can be exploited by an attacker to execute arbitrary code on a...

Dell EMC XtremIO Brute Force Compromise Vulnerability

Dell EMC XtremIO is an all-flash, horizontally scalable enterprise storage array from Dell, Inc. A brute force vulnerability exists in Dell EMC XtremIO X2 versions prior to 6.4.0-22, which can be exploited by an unauthenticated, remote attacker to gain access to the administrator account...

Cloud Mobility for Dell EMC Storage Access Control Error Vulnerability

Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...

CVE-2022-31228

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

Code injection

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

CVE-2022-31228

Dell EMC XtremIO X2 versions prior to 6.4.0-22 are affected by a brute-force/authentication limitation vulnerability. An unauthenticated, remote attacker can potentially exploit this to gain access to an administrator account. The issue is due to insufficient limits on authentication attempts. Im...

CVE-2022-31228

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

CVE-2022-31228

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

CVE-2022-31228: Improper Restriction of Excessive Authentication Attempts

Dell EMC XtremIO versions prior to X2 6.4.0-22 contain a bruteforce vulnerability. A remote unauthenticated attacker can potentially exploit this vulnerability and gain access to an admin account...

Cloud Mobility for Dell EMC Storage 安全漏洞

Cloud Mobility for Dell EMC Storage is a Dell USA feature that supports the transfer, storage and access of volume snapshot copies between compatible local Dell EMC storage devices and public cloud object storage. An access control error vulnerability exists in Cloud Mobility for Dell EMC Storage...

PT-2022-5115 · Dell Emc · Dell Emc Xtremio

Name of the Vulnerable Software and Affected Versions: Dell EMC XtremIO versions prior to X2 6.4.0-22 Description: The issue is related to insufficient authentication attempt limitation, allowing a remote unauthenticated attacker to potentially exploit it and gain access to an admin account throu...

The vulnerability of the Dell EMC CloudLink software, related to deficiencies in authentication procedures, allows a perpetrator to gain unauthorized access to the device.

The vulnerability of the Dell EMC CloudLink software is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the device...

Dell EMC NetWorker Privilege Escalation (DSA-2022-194)

The version of Dell EMC NetWorker installed on the remote Windows host is 19.2.1.x, 19.3.x, 19.4.x 19.5.x 19.6.x prior to 19.6.1.2 or 19.7.0.0. It is, therefore, affected by a privilege escalation vulnerability. An authenticated, non-administrative attacker can exploit this vulnerability to gain...

EMC Data Protection Advisor < 19.7 Build B4 XSS (DSA-2022-107)

According to its self-reported version, the application is below version 19.7 Build B4. It is, therefore, affected by a stored cross-site scripting vulnerability. When a victim user accesses the data store through their browsers, the malicious code gets executed by the web browser in the context ...

CVE-2022-34379

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

Authentication flaw

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

CVE-2022-34379

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

CVE-2022-34379

Dell EMC CloudLink, versions prior to and including 7.1.2, exposes an Authentication Bypass vulnerability. The root cause is weaknesses in the authentication procedure allowing a remote attacker who knows AD usernames to gain unauthorized access. Impact: unauthorized system access (high/C confide...

CVE-2022-34379: Improper Authentication

Dell EMC CloudLink 7.1.2 and all prior versions contain an Authentication Bypass Vulnerability. A remote attacker, with the knowledge of the active directory usernames, could potentially exploit this vulnerability to gain unauthorized access to the system...

CVE-2022-34368

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources...