Vulnerability Description
Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system takeover by an attacker.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Powerstoreos | >= 2.0.0.0, < 2.1.1.0 |
| Dell | Powerstore T | - |
| Dell | Powerstore X | - |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/kbdoc/000196367Vendor Advisory
- https://www.dell.com/support/kbdoc/000196367Vendor Advisory
FAQ
What is CVE-2022-26868?
CVE-2022-26868 is a vulnerability with a CVSS score of 6.4 (MEDIUM). Dell EMC PowerStore versions 2.0.0.x, 2.0.1.x, and 2.1.0.x are vulnerable to a command injection flaw. An authenticated attacker could potentially exploit this vulnerability, leading to the execution ...
How severe is CVE-2022-26868?
CVE-2022-26868 has been rated MEDIUM with a CVSS base score of 6.4/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-26868?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Powerstoreos, Dell Powerstore T, Dell Powerstore X.