CVE-2022-22555

Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
dellCNA
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 40%
VendorProductVersion
dellemc_powerstore_500t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_1200t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_3200t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_5200t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_9200t_firmware
𝑥
< 3.0.0.0-1732745
𝑥
= Vulnerable software versions