Authentication flaw

Dell EMC PowerStore, contains an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are...

Design/Logic Flaw

Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to system takeover or IP exposure...

CVE-2022-34368

Dell EMC NetWorker 19.2.1.x 19.3.x, 19.4.x, 19.5.x, 19.6.x and 19.7.0.0 contain an Improper Handling of Insufficient Permissions or Privileges vulnerability. Authenticated non admin user could exploit this vulnerability and gain access to restricted resources...

PT-2022-6353 · Dell Emc · Dell Emc Networker

Name of the Vulnerable Software and Affected Versions: Dell EMC NetWorker versions 19.2.1.x through 19.7.0.0 Description: The issue is related to an Improper Handling of Insufficient Permissions or Privileges, which could allow an authenticated non-admin user to gain access to restricted resource...

Dell EMC PowerStore 操作系统命令注入漏洞

Dell EMC PowerStore is a storage device from Dell, Inc.Pow is an open source, complete authentication and user management library built into Elixir that works out-of-the-box for Phoenix and Plug-based applications while being fully customizable. A security vulnerability exists in the Dell EMC...

Dell EMC PowerStore 代码问题漏洞

Dell EMC PowerStore is a storage device from Dell USA. A security vulnerability exists in Dell EMC PowerStore v3.0.0.0 and earlier versions, which originates from a DLL hijacking vulnerability that can be exploited by an attacker to execute arbitrary code, elevate privileges, and bypass software...

CVE-2022-34367

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

CVE-2022-34367

CVE-2022-34367 affects Dell EMC Data Protection Central versions 19.1–19.6. The vulnerability is a Cross‑Site Request Forgery (CSRF) that could allow a remote unauthenticated attacker to trigger unintended server operations. Exploitation details are not provided in the documents; the impact is de...

CVE-2022-32498

Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to system takeover or IP exposure...

CVE-2022-32498

Summary: CVE-2022-32498 affects Dell EMC PowerStore before v3.0.0.0, with a DLL hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this to execute arbitrary code, escalate privileges, and bypass software allow lists, potentially leading to system takeover or IP exposure. ...

CVE-2022-31234

Affected product/component: Dell EMC PowerStore Manager GUI. Root cause / vulnerability type: Improper restriction of excessive authentication attempts. Impact: Remote unauthenticated attacker could brute-force passwords, potentially leading to account takeover if weak passwords are used. Exploit...

CVE-2022-31234

Dell EMC PowerStore, contains an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are...

CVE-2022-22555

CVE-2022-22555 – Dell EMC PowerStore OS command injection : A locally authenticated attacker could exploit a vulnerability in the PowerStore OS to run arbitrary OS commands with the vulnerable application’s privileges, potentially leading to privilege escalation. Affected product is Dell EMC Powe...

CVE-2022-22555

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation ma...

PT-2022-15523 · Dell Emc · Dell Emc Powerstore

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerStore affected versions not specified Description: The issue is an OS command injection vulnerability. A locally authenticated attacker could potentially exploit this, leading to the execution of arbitrary OS commands on the...

PT-2022-22147

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.1 through 19.6 Description The issue allows a remote unauthenticated attacker to potentially exploit a Cross-Site Request Forgery vulnerability, leading to the processing of unintended server...

CVE-2022-22555: Improper Neutralization of Special Elements used in an OS Command

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation ma...

CVE-2022-34367: Cross-Site Request Forgery (CSRF)

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

CVE-2022-32498: Uncontrolled Search Path Element

Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to system takeover or IP exposure...

PT-2022-20630

Name of the Vulnerable Software and Affected Versions Dell EMC PowerStore affected versions not specified Description The issue is related to an improper restriction of excessive authentication attempts in the PowerStore Manager GUI. A remote unauthenticated attacker could exploit this, potential...