by Kastro
Paper/Archive/CVE-2022-33936

CVE-2022-33936

Dell Cloud Mobility for Dell Storage — Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability.

EPSS 1%CVSS 9.8
critical.is priorityof 100
42
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 64.2.642 × 2012.8No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity.

Affected

ProductAffectedFixed inSource
Cloud Mobility for Dell Storageunspecified – < 1.3.11.3.1CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
dell (CNA)8.0CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References

refdell.com/support/kbdoc/en-us/000201258/dsa-2022-182-cloud-mobility-for-dell-emc-storage-security-update-for-a-path-traversal-rce-vulnerability