CVE-2022-34453: Dell Xtremio x2 Firmware

High severity, CVSS 7.1. EPSS: 0.4% chance of exploitation in the next 30 days.

Dell XtremIO X2 XMS versions prior to 6-4-1.11 contain an improper access control vulnerability. A remote read only user could potentially exploit this vulnerability to perform add/delete QoS policies which are disabled by default.

Affected products

• Dell Xtremio x2 Firmware: before 6.4.1-11 (fixed in 6.4.1-11)

Published 2023-08-03. Last modified 2026-06-17.