CVE-2022-31233: Dell Evasa Provider Virtual Appliance

High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days.

Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.

Affected products

  • Dell Evasa Provider Virtual Appliance: before 9.2.3.7 (fixed in 9.2.3.7)
  • Dell Powermax OS: version 5978 only
  • Dell Solutions Enabler: before 9.2.3.4 (fixed in 9.2.3.4)
  • Dell Solutions Enabler Virtual Appliance: before 9.2.3.4 (fixed in 9.2.3.4)
  • Dell Unisphere 360: before 9.2.3.6 (fixed in 9.2.3.6)
  • Dell Unisphere For Powermax: before 9.2.3.15 (fixed in 9.2.3.15)
  • Dell Unisphere For Powermax Virtual Appliance: before 9.2.3.15 (fixed in 9.2.3.15)
  • Dell Vasa: before 9.2.3.15 (fixed in 9.2.3.15)

Published 2022-08-31. Last modified 2026-06-17.