Skip to content
OpenAdvisories
High · 7.8 CVE-2022-32481 EUVD-2022-35553GHSA-x26h-2jv4-hhgp

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A…

Published Jul 7, 2022 · Updated Sep 17, 2024 · Assigned by dell

Description

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover.

Affected products

VendorProductAffectedFixed
Dell Cyber Recovery unspecified – < 19.11 19.11

References