6.4
Medium
CVE-2022-33923 Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment
Description
Dell PowerStore, versions prior to 3.0.0.0, contains an OS Command Injection vulnerability in PowerStore T environment. A locally authenticated attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS command on the PowerStore underlying OS. Exploiting may lead to a system take over by an attacker.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerStore 3.0 | earliest → < 3.0.0.0 | 3.0.0.0 |
Other CVEs of PowerStore
The 23 CVEs of PowerStore →
CVE-2024-30476
PowerStore contains a Stored Cross-Site Scripting Vulnerability in the PowerStore Manager
5.4
Medium
CVE-2026-28265
PowerStore, contains a Path Traversal vulnerability in the Service user
4.4
Medium
CVE-2025-36572
Dell PowerStore, version(s) 4.0.0.0, contain(s) an Use of Hard-coded Credentials vulnerability in the PowerStore image…
6.5
Medium
CVE-2024-51532
Dell PowerStore contains an Improper Neutralization of Argument Delimiters in a Command ('Argument Injection')…
7.1
High