CVE-2022-32481: Dell Powerprotect Cyber Recovery

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerProtect Cyber Recovery, versions prior to 19.11, contain a privilege escalation vulnerability on virtual appliance deployments. A lower-privileged authenticated user can chain docker commands to escalate privileges to root leading to complete system takeover.

Affected products

  • Dell Powerprotect Cyber Recovery: before 19.11 (fixed in 19.11)

Published 2022-07-07. Last modified 2026-06-17.