CVE-2022-34450

Published: Feb 11, 2023Modified: Nov 21, 2024

6.7

Vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 0.8 / Impact: 5.9

Source: NVD

Description

PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted control/code execution on the system as root.

Affected (1)

Products: Dell: Powerpath Management Appliance

Dell

1 product

Powerpath Management Appliance

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Powerpath Management Appliance	Version 3.3

Related CWEs

CWE-183

Permissive List of Allowed Inputs

The product implements a protection mechanism that relies on a list of inputs (or properties of inputs) that are explicitly allowed by policy because the inputs are assumed to be safe, but the list is too permissive - that is, it allows an input that is unsafe, leading to resultant weaknesses.

References (2)

https://www.dell.com/support/kbdoc/000205404

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000205404

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.