Dell Powerpath Management Appliance vulnerabilities

8 CVEs affecting Dell Powerpath Management Appliance, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-34451, published 2023-02-11.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-34447, published 2023-02-11. High severity, CVSS 7.2. EPSS: 1.7% chance of exploitation in the next 30 days. PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains OS Command Injection vulnerability. An authenticated remote attacker with administrative privileges could potentially…
• CVE-2022-34446, published 2023-02-11. High severity, CVSS 8.1. EPSS: 0.8% chance of exploitation in the next 30 days. PowerPath Management Appliance with versions 3.3 & 3.2* contains Authorization Bypass vulnerability. An authenticated remote user with limited privileges (e.g., of role Monitoring) can exploit this…
• CVE-2022-34452, published 2023-02-10. Low severity, CVSS 2.7. EPSS: 0.4% chance of exploitation in the next 30 days. PowerPath Management Appliance with versions 3.3, 3.2*, 3.1 & 3.0* contains sensitive information disclosure vulnerability. An Authenticated admin user can able to exploit the issue and view…
• CVE-2022-34450, published 2023-02-11. Medium severity, CVSS 6.7. EPSS: 0.4% chance of exploitation in the next 30 days. PowerPath Management Appliance with version 3.3 contains Privilege Escalation vulnerability. An authenticated admin user could potentially exploit this issue and gain unrestricted control/code…
• CVE-2022-34451, published 2023-02-11. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Stored Cross-site Scripting Vulnerability. An authenticated admin user could potentially exploit this vulnerability, to…
• CVE-2022-34448, published 2023-02-11. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. PowerPath Management Appliance with versions 3.3 & 3.2*, 3.1 & 3.0* contains a Cross-site Request Forgery vulnerability. An unauthenticated non-privileged user could potentially exploit the issue…
• CVE-2021-43587, published 2021-12-21. Medium severity, CVSS 6.7. EPSS: 0.2% chance of exploitation in the next 30 days. Dell PowerPath Management Appliance, versions 3.2, 3.1, 3.0 P01, 3.0, and 2.6, use hard-coded cryptographic key. A local high-privileged malicious user may potentially exploit this vulnerability to…
• CVE-2022-34449, published 2023-02-11. Medium severity, CVSS 6.0. EPSS: 0.2% chance of exploitation in the next 30 days. PowerPath Management Appliance with versions 3.3 & 3.2* contains a Hardcoded Cryptographic Keys vulnerability. Authenticated admin users can exploit the issue that leads to view and modifying…