Dell Powermax OS vulnerabilities

16 CVEs affecting Dell Powermax OS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2023-48671, published 2023-12-14.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2023-48665, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48664, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48663, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48662, published 2023-12-14. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain a command injection vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability leading to the…
• CVE-2023-48660, published 2023-12-14. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote attacker could potentially exploit this vulnerability to read arbitrary files from the target…
• CVE-2023-48671, published 2023-12-14. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain an information disclosure vulnerability. A remote attacker could potentially exploit this vulnerability leading to obtain sensitive information…
• CVE-2020-5345, published 2020-06-23. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC Unisphere for PowerMax versions prior to 9.1.0.17, Dell EMC Unisphere for PowerMax Virtual Appliance versions prior to 9.1.0.17, and PowerMax OS Release 5978 contain an authorization bypass…
• CVE-2022-45103, published 2023-01-18. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax vApp, VASA Provider vApp, and Solution Enabler vApp version 9.2.3.x contain an information disclosure vulnerability. A low privileged remote attacker could potentially…
• CVE-2021-21531, published 2021-04-30. High severity, CVSS 7.8. EPSS: 0.7% chance of exploitation in the next 30 days. Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform…
• CVE-2020-35170, published 2021-01-05. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Dell EMC Unisphere for PowerMax versions prior to 9.1.0.9, Dell EMC Unisphere for PowerMax versions prior to 9.0.2.16, and Dell EMC PowerMax OS 5978.221.221 and 5978.479.479 contain a Cross-Site…

Latest

• CVE-2023-48661, published 2023-12-14. Medium severity, CVSS 4.9. EPSS: 0.6% chance of exploitation in the next 30 days. Dell vApp Manager, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. A remote malicious user with high privileges could potentially exploit this vulnerability to read arbitrary…
• CVE-2021-21548, published 2023-03-17. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate…
• CVE-2022-31233, published 2022-08-31. High severity, CVSS 8.0. EPSS: 0.3% chance of exploitation in the next 30 days. Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability. An adjacent malicious user may potentially exploit this vulnerability to escalate their privileges and…