Skip to content
OpenAdvisories
Medium · 6.4 CVE-2022-33923 EUVD-2022-36959GHSA-c4w7-hq99-3rh7

Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authentic…

Published Jul 20, 2022 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.

Affected products

VendorProductAffectedFixed
Dell PowerStore unspecified – < 3.0.0.0 3.0.0.0

References