CVE-2022-22555

EUVD-2022-27701
Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege.
OS Command Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
dellCNA
6 MEDIUM
LOCAL
LOW
HIGH
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 67%
Affected Products (NVD)
VendorProductVersion
dellemc_powerstore_500t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_1200t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_3200t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_5200t_firmware
𝑥
< 3.0.0.0-1732745
dellemc_powerstore_9200t_firmware
𝑥
< 3.0.0.0-1732745
𝑥
= Vulnerable software versions