PT-2023-13413 · Dell · Dell Xtremio X2 Xms

Published 2023-08-03 · Updated 2023-08-08 · CVE-2022-34453

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Dell XtremIO X2 XMS versions prior to 6-4-1.11

Description The issue is related to improper access control, allowing a remote read-only user to potentially exploit it and perform actions such as adding or deleting QoS policies, which are disabled by default.

Recommendations For versions prior to 6-4-1.11, update to version 6-4-1.11 or later to resolve the issue. As a temporary workaround, consider restricting access to QoS policy management to prevent unauthorized modifications until the update is applied.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

CVE-2022-34453

Affected Products

Dell Xtremio X2 Xms

References · 4

• https://dell.com/support/kbdoc/en-us/000204809/dsa-2022-290-dell-xtremio-x2-security-advisory-for-xms-gui?lang=en · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-34453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-34453 · Security Note
• https://t.me/cibsecurity/67661 · Telegram Post