PT-2022-21924 · Dell Emc · Cloud Mobility For Dell Emc Storage

Published 2022-07-07 · Updated 2022-07-15 · CVE-2022-33936

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cloud Mobility for Dell EMC Storage version 1.3.0.XXX

Description The issue allows a non-privileged user to potentially exploit a remote code execution vulnerability, leading to achieving a root shell. This is considered a critical issue.

Recommendations For Cloud Mobility for Dell EMC Storage version 1.3.0.XXX, upgrade to a newer version at the earliest opportunity to resolve the issue.

Fix

Related Identifiers

CVE-2022-33936

Affected Products

Cloud Mobility For Dell Emc Storage

References · 4

• https://dell.com/support/kbdoc/en-us/000201258/dsa-2022-182-cloud-mobility-for-dell-emc-storage-security-update-for-a-path-traversal-rce-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-33936 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33936 · Security Note
• https://t.me/cvenotify/32789 · Telegram Post