CVE-2022-31233 Privilege escalation in Unisphere for PowerMax
An adjacent attacker can escalate privileges in Dell Unisphere for PowerMax to access restricted functionalities.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-31233?
CVE-2022-31233 is a medium-severity vulnerability in Dell Unisphere for PowerMax, published on 31 Aug 2022. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.
Which versions are affected by CVE-2022-31233?
It affects 8 products.
Products include Dell Evasa Provider Virtual Appliance, Dell Powermax Os, Dell Solutions Enabler, Dell Solutions Enabler Virtual Appliance, Dell Unisphere 360, Dell Unisphere for Powermax and 2 more.
How do I fix CVE-2022-31233?
No fix has been published for CVE-2022-31233 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-31233 being exploited?
There is no known exploitation of CVE-2022-31233 in the wild and no public exploit code.
Other vulnerabilities in Dell Unisphere for PowerMax
Sources
Also known as GHSA-x88j-4p5j-6442.