CVE-2022-22555
MEDIUM 6.7EPSS 0.8%
Dell EMC PowerStore, contains an OS command injection Vulnerability. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the PowerStore underlying OS, with the privileges of the vulnerable application. Exploitation may lead to an elevation of privilege.
- Affected
- Dell · PowerStore
- CVSS v3.1 NVD
- 6.7 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 EMC
- 6.0 MEDIUM
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H - EPSS
- 0.80% chance of exploitation in the next 30 days, 56th percentile
- Published
- 2022-07-20
- Updated
- 2024-09-16
Proof-of-concept exploits (1)
- colaoo123/cve-2022-225550★ · 2024-02-16