← Database

CVE-2022-33923

MEDIUM CVSS: 6.4 Published: 2022-07-21 Modified: 2026-06-17

Description

Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.

Affected Platforms

Dell Emc Powerstore 9200TDell Emc Powerstore 500TDell Emc Powerstore 3200T FirmwareDell Emc Powerstore 1200TDell Emc Powerstore 5200T FirmwareDell Emc Powerstore 9200T FirmwareDell Emc Powerstore 3200TDell Emc Powerstore 500T FirmwareDell Emc Powerstore 1200T FirmwareDell Emc Powerstore 5200T

Weakness Type

CWE-78, CWE-78

References