CVE-2022-32498
Medium
Description
Dell EMC PowerStore, Versions prior to v3.0.0.0 contain a DLL Hijacking vulnerability in PSTCLI. A local attacker can potentially exploit this vulnerability to execute arbitrary code, escalate privileges, and bypass software allow list solutions, leading to system takeover or IP exposure.
SeverityMedium
CVSS5.5
Exploit probability—
ProductDell Powerstore Command Line Interface
PublishedJul 21, 2022
First seenJul 21, 2022
Weakness typeCWE-427CWE-427
How to fix
Update
- dell powerstore_command_line_interface3.0.0.0-1732745 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell powerstore_command_line_interface | v < 3.0.0.0-1732745 | 3.0.0.0-1732745 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.