CVE-2021-36338: Dell Powermax OS

High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days.

Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to. CVE-2022-31233 addresses the partial fix in CVE-2021-36338.

Affected products

• Dell Powermax OS: version 5978 only
• Dell Solutions Enabler: before 9.1.0.18 (fixed in 9.1.0.18); from 9.2.0.0, before 9.2.3.0 (fixed in 9.2.3.0)
• Dell Solutions Enabler Virtual Appliance: before 9.1.0.18 (fixed in 9.1.0.18); from 9.2.0.0, before 9.2.3.0 (fixed in 9.2.3.0)
• Dell Unisphere 360: before 9.1.0.29 (fixed in 9.1.0.29); from 9.2.0.0, before 9.2.3.3 (fixed in 9.2.3.3)
• Dell Unisphere For Powermax: before 9.1.0.31 (fixed in 9.1.0.31); from 9.2.0.0, before 9.2.3.4 (fixed in 9.2.3.4)
• Dell Unisphere For Powermax Virtual Appliance: before 9.1.0.31 (fixed in 9.1.0.31); from 9.2.0.0, before 9.2.3.4 (fixed in 9.2.3.4)
• Dell Vasa: before 9.1.0.723 (fixed in 9.1.0.723); from 9.2.0.0, before 9.2.3.0 (fixed in 9.2.3.0)

Published 2022-01-21. Last modified 2026-06-17.