CVE-2022-45104: Dell Evasa Provider Virtual Appliance

High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain a command execution vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to execute arbitrary commands on the underlying system.

Affected products

• Dell Evasa Provider Virtual Appliance: before 9.2.4.15 (fixed in 9.2.4.15)
• Dell Solutions Enabler Virtual Appliance: before 9.2.3.6 (fixed in 9.2.3.6); before 9.2.4.26 (fixed in 9.2.4.26)
• Dell Unisphere For Powermax Virtual Appliance: before 9.2.4.26 (fixed in 9.2.4.26)

Published 2023-02-11. Last modified 2026-06-17.