medium6.4
CVE-2022-33923
Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment.
Impact
Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Emc Powerstore 500t Firmware | before 3.0.0.0-1732745 |
| Dell | Emc Powerstore 1200t Firmware | before 3.0.0.0-1732745 |
| Dell | Emc Powerstore 3200t Firmware | before 3.0.0.0-1732745 |
| Dell | Emc Powerstore 5200t Firmware | before 3.0.0.0-1732745 |
| Dell | Emc Powerstore 9200t Firmware | before 3.0.0.0-1732745 |