CVE-2022-34367: Cross-Site Request Forgery (CSRF)

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

CVE-2022-31234: Improper Restriction of Excessive Authentication Attempts

Dell EMC PowerStore, contains an Improper Restriction of Excessive Authentication Attempts Vulnerability in PowerStore Manager GUI. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to password brute-forcing. Account takeover is possible if weak passwords are...

CVE-2022-22555: Improper Neutralization of Special Elements used in an OS Command

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation ma...

PT-2022-22147

Name of the Vulnerable Software and Affected Versions Dell EMC Data Protection Central versions 19.1 through 19.6 Description The issue allows a remote unauthenticated attacker to potentially exploit a Cross-Site Request Forgery vulnerability, leading to the processing of unintended server...

CVE-2022-32498: Uncontrolled Search Path Element

Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to system takeover or IP exposure...

CVE-2022-34367

Dell EMC Data Protection Central versions 19.1, 19.2, 19.3, 19.4, 19.5, 19.6, contains a Cross-Site Request Forgery Vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to processing of unintended server operations...

CVE-2022-33936

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...

Code injection

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...

CVE-2022-33936

CVE-2022-33936 affects Cloud Mobility for Dell EMC Storage, 1.3.0.XXX, with an RCE vulnerability that could allow a non-privileged user to obtain a root shell. The connected documents indicate a path-traversal/remote code execution issue and cite a Dell security update as remediation. The CVE rec...

CVE-2022-33936

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...

CVE-2022-33936: Undefined Security Weakness

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity...

CVE-2022-22555

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation ma...

Cloud Mobility for Dell EMC Storage 安全漏洞

Cloud Mobility for Dell EMC Storage is a feature from Dell USA that supports the transfer, storage, and access of volume snapshot copies between compatible local Dell EMC Storage devices and public cloud object storage. A security vulnerability exists in Cloud Mobility for Dell EMC Storage 1.3.0...

Dell EMC PowerProtect 安全漏洞

Dell EMC PowerProtect is a software application from Dell, Inc. It is used by the company to protect, manage and recover its most critical application data. A security vulnerability exists in Dell EMC PowerProtect Cyber Recovery versions prior to 19.11, which originates from an authenticated,...

PT-2022-21924

Name of the Vulnerable Software and Affected Versions Cloud Mobility for Dell EMC Storage version 1.3.0.XXX Description The issue allows a non-privileged user to potentially exploit a remote code execution vulnerability, leading to achieving a root shell. This is considered a critical issue...

Dell EMC Unisphere for PowerMax 安全漏洞

Dell EMC Unisphere for PowerMax is a suite of graphical management tools for PowerMax storage arrays from Dell USA. A security vulnerability exists in Dell EMC Unisphere for PowerMax. An attacker has exploited the vulnerability to bypass restrictions in Dell EMC Unisphere for PowerMax in order to...

Dell EMC iDRAC8 < 2.83.83.83 / Dell EMC iDRAC9 < 5.10.30.00 (DSA-2022-154)

The version of Dell EMC iDRAC8 or Dell EMC iDRAC9 installed on the remote host is prior to 2.83.83.83/5.10.30.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-154 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application...

Dell EMC iDRAC8 < 2.80.80.80 / Dell EMC iDRAC9 < 4.40.40.00 (DSA-2021-177)

The version of Dell EMC iDRAC8 or Dell EMC iDRAC9 installed on the remote host is affected by a vulnerability as referenced in the DSA-2021-177 advisory: - Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated...

Dell EMC iDRAC9 < 5.00.10.00 (DSA-2021-177)

The version of Dell EMC iDRAC9 installed on the remote host is prior to 5.00.10.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2021-177 advisory. - There's a flaw in the zeromq server in versions before 4.3.3 in src/decoderallocators.hpp. The decoder static allocator...

Dell EMC iDRAC9 < 5.00.00.00 (DSA-2021-177)

The version of Dell EMC iDRAC9 installed on the remote host is prior to 5.00.00.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2021-177 advisory: - iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacke...