CVE-2022-31233: Dell Evasa Provider Virtual Appliance
High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days.
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and access functionalities they do not have access to.
Affected products
- Dell Evasa Provider Virtual Appliance: before 9.2.3.7 (fixed in 9.2.3.7)
- Dell Powermax OS: version 5978 only
- Dell Solutions Enabler: before 9.2.3.4 (fixed in 9.2.3.4)
- Dell Solutions Enabler Virtual Appliance: before 9.2.3.4 (fixed in 9.2.3.4)
- Dell Unisphere 360: before 9.2.3.6 (fixed in 9.2.3.6)
- Dell Unisphere For Powermax: before 9.2.3.15 (fixed in 9.2.3.15)
- Dell Unisphere For Powermax Virtual Appliance: before 9.2.3.15 (fixed in 9.2.3.15)
- Dell Vasa: before 9.2.3.15 (fixed in 9.2.3.15)
Published 2022-08-31. Last modified 2026-06-17.