Dell Emc Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	294
Backup Software	16
Cloud Software	16
Risk Management System	12
Policy Management Software	4

Product

Dell EMC PowerScale OneFS	60
Dell EMC iDRAC9	34
Dell EMC PowerStore	20
Dell EMC UnityVSA	18
Dell EMC iDRAC8	14

Remediation

Official fix	192
Temporary fix	0
Workaround	2
Not available	0
Not defined	150

Exploitability

Attacked	0
Highly functional	0
Functional	0
Proof-of-Concept	14
Unproven	0
Not defined	330

Access Vector

Not Defined	0
Physical	2
Local	56
Adjacent	10
Network	276

Authentication

Not Defined	0
High	60
Low	146
None	138

User Interaction

Not Defined	0
Required	54
None	290

C3BM Index

CVSSv3 Base

≤1	0
≤2	10
≤3	4
≤4	20
≤5	52
≤6	74
≤7	86
≤8	54
≤9	38
≤10	6

CVSSv3 Temp

≤1	0
≤2	10
≤3	4
≤4	20
≤5	52
≤6	84
≤7	86
≤8	48
≤9	34
≤10	6

VulDB

≤1	0
≤2	10
≤3	28
≤4	40
≤5	68
≤6	72
≤7	54
≤8	56
≤9	10
≤10	6

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	24
≤6	12
≤7	26
≤8	56
≤9	26
≤10	40

CNA

≤1	0
≤2	0
≤3	0
≤4	2
≤5	18
≤6	26
≤7	36
≤8	36
≤9	44
≤10	18

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	10
<2k	2
<5k	36
<10k	130
<25k	166
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	206
<2k	8
<5k	46
<10k	60
<25k	24
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (131): AppSync (5), Avamar (1), Avamar ADMe Web Interface (1), Avamar Server (11), BSAFE Crypto-C Micro Edition (1), CloudLink (9), Cloud Mobility for Dell Storage (1), DDOS (1), Data Protection Advisor (7), Data Protection Central (4), Data Protection Search (1), ECS (3), EMC IsilonSD Edge (1), EMC PowerScale (1), EMC PowerScale OneFS (2), EMC Solutions Enabler (2), EMC Solutions Enabler Virtual Appliance (2), EMC Unisphere for VMAX Virtual Appliance (2), EMC Unity (1), EMC VASA Virtual Appliance (2), EMC VASA Virtual Appliances (2), EMC VMAX Embedded Management (4), EMC VxRail (1), ESRS Policy Manager (1), Enterprise Copy Data Management (1), Enterprise SONiC OS (1), Enterprise Storage Analytics for vRealize Operations (1), Governance (7), IDPA (1), InsightIQ (1), Integrated Data Protection Appliance (10), Integrated System for Microsoft Azure Stack Hub (2), Isilion (6), Isilon OneFS (16), IsilonSD Management Server (2), Lifecycle (4), NetWorker (13), NetWorker AMQP (1), Networking PC5500 (1), Networking S4100 Switch (1), Networking S5200 Switch (1), Networking X-Series (2), OpenManage Enterprise (9), OpenManage Enterprise-Modular (5), OpenManage Enterprise Modular (1), OpenManage Integration (2), OpenManage Integration for Microsoft System Center (1), OpenManage Server Administrator (5), Open Manage System Administrator (2), PV ME5 (1), PowerConnect 7000 (1), PowerConnect 8024 (1), PowerConnect M6220 (1), PowerConnect M6348 (1), PowerConnect M8024 (1), PowerConnect M8024-K (1), PowerEdge VRTX Switch Module (2), PowerFlex (1), PowerMax OS (5), PowerProtect Cyber Recovery (2), PowerScale Node A200 (1), PowerScale Node F800 (1), PowerScale Node F810 (1), PowerScale Node H400 (1), PowerScale Node H500 (1), PowerScale Node H600 (1), PowerScale Node H5600 (1), PowerScale Node PowerScale Node A2000 (1), PowerScale Nodes (1), PowerScale OneFS (70), PowerStore (14), RSA Archer (11), RSA Authentication Manager (6), RSA BSAFE Crypto-C Micro Edition (1), RSA BSAFE Crypto-J (1), RSA BSAFE Micro Edition Suite (6), RSA BSAFE SSL-J (3), RSA Certificate Manager (1), RSA Identity Governance (4), RSA Identity Lifecycle (2), RSA Identity Management (1), RSA NetWitness Platform (3), RSA Security Analytics (3), RSA Via Lifecycle (4), RSA Web Threat Detection (1), RecoverPoint (6), RecoverPoint for VMs (3), RecoverPoint for Virtual Machines (3), Reporting (1), Repository Manager (2), SCG (1), SMIS (1), SRS Policy Manager (1), SaleIO (1), ScaleIO (2), Secure Remote Services (3), SmartFabric (1), Solutions Enabler Virtual Appliance (1), SourceOne (1), Storage (1), Storage Monitoring (1), Streaming Data Platform (5), SupportAssist Enterprise (1), System Update (1), Unisphere for PowerMax (5), Unisphere for PowerMax Virtual Appliance (2), Unisphere for VMAX (2), Unisphere for VMAX Virtual Appliance (1), Unity (12), Unity OE (1), Unity Operating Environment (2), UnityVSA (14), UnityVSA OE (1), Unity XT (8), Update Package Framework (1), VASA Provider Virtual Appliance (1), VMAX Embedded Management (1), VNX1 (1), VNX2 (1), VNX2 OE for File (5), VNXe3200 (1), VPLEX GeoSynchrony (1), ViPR Controller (1), Virtual Appliances (1), XtremIO (2), XtremIO XMS (3), iDRAC6 (2), iDRAC7 (8), iDRAC8 (12), iDRAC9 (28), iDRAC Service Module (1)

Link to Vendor Website: https://www.dellemc.com/

Published	Base	Temp	Vulnerability	Prod	Exp	Cou	EPSS	CTI	CVE
02/08/2024	5.1	5.1	Dell EMC AppSync log file	Unknown	Not defined	Official fix	0.00103	0.03	CVE-2024-22464
03/17/2023	6.8	6.7	Dell EMC Unisphere for PowerMax certificate validation	Unknown	Not defined	Official fix	0.00053	0.00	CVE-2021-21548
03/02/2023	7.3	7.3	Dell EMC PowerScale OneFS information disclosure	Unknown	Not defined	Not defined	0.00039	0.03	CVE-2023-25536
02/28/2023	5.5	5.5	Dell EMC PowerScale OneFS default permission	Unknown	Not defined	Not defined	0.00021	0.00	CVE-2023-25540
02/28/2023	6.0	6.0	Dell EMC PowerScale Node F810 Hardware Management Software protection mechanism	Unknown	Not defined	Not defined	0.00114	0.02	CVE-2023-23689
02/03/2023	8.5	8.5	Dell EMC NetWorker nsrexecd code injection	Unknown	Not defined	Not defined	0.00765	0.03	CVE-2023-24576
02/01/2023	8.8	8.6	Dell EMC DDOS os command injection	Unknown	Not defined	Official fix	0.00950	0.00	CVE-2023-23692
02/01/2023	5.4	5.4	Dell EMC Data Protection Central Web Page Cache http headers for scripting syntax	Unknown	Not defined	Not defined	0.00295	0.00	CVE-2022-45102
01/20/2023	7.5	7.5	Dell EMC PV ME5 request smuggling	Unknown	Not defined	Not defined	0.00387	0.04	CVE-2023-23691
01/19/2023	6.3	6.3	Dell EMC Cloud Mobility for Dell Storage improper check for certificate revocation	Cloud Software	Not defined	Not defined	0.00074	0.06	CVE-2023-23690
10/22/2022	6.9	6.9	Dell EMC PowerScale OneFS privileges management	Unknown	Not defined	Not defined	0.00040	0.08	CVE-2022-34438
10/22/2022	7.0	7.0	Dell EMC PowerScale OneFS os command injection	Unknown	Not defined	Not defined	0.00099	0.02	CVE-2022-34437
10/22/2022	4.6	4.6	Dell EMC PowerScale OneFS log file	Unknown	Not defined	Not defined	0.00108	0.03	CVE-2022-31239
10/22/2022	4.3	4.3	Dell EMC Isilon OneFS SSHD default permission	Unknown	Not defined	Not defined	0.00127	0.00	CVE-2020-5355
10/22/2022	6.0	6.0	Dell EMC PowerScale OneFS allocation of resources	Unknown	Not defined	Not defined	0.00256	0.00	CVE-2022-34439
10/13/2022	5.9	5.8	Dell EMC XtremIO excessive authentication	Unknown	Not defined	Official fix	0.01163	0.03	CVE-2022-31228
10/11/2022	6.4	6.4	Dell EMC Enterprise SONiC OS SSH hard-coded key	Unknown	Not defined	Not defined	0.00219	0.06	CVE-2022-34425
09/02/2022	4.4	4.4	Dell EMC PowerScale OneFS path traversal	Unknown	Not defined	Not defined	0.00049	0.00	CVE-2022-34378
09/02/2022	7.2	7.2	Dell EMC PowerScale OneFS cleartext transmission	Unknown	Not defined	Not defined	0.00256	0.00	CVE-2022-34371
09/02/2022	6.2	6.2	Dell EMC PowerScale OneFS log file	Unknown	Not defined	Not defined	0.00330	0.09	CVE-2022-34369
09/02/2022	8.8	8.7	Dell EMC CloudLink Active Directory improper authentication	Cloud Software	Not defined	Official fix	0.00189	0.05	CVE-2022-34379
08/31/2022	4.4	4.4	Dell EMC Data Protection Advisor Trusted Application Data Store cross site scripting	Unknown	Not defined	Not defined	0.00252	0.00	CVE-2022-33935
08/31/2022	5.8	5.8	Dell EMC NetWorker insufficient permissions or privileges	Unknown	Not defined	Not defined	0.00039	0.00	CVE-2022-34368
08/31/2022	8.6	8.6	Dell EMC SmartFabric os command injection	Unknown	Not defined	Not defined	0.01362	0.00	CVE-2022-31232
08/23/2022	5.3	5.2	Dell EMC PowerScale OneFS unprotected primary channel	Unknown	Not defined	Not defined	0.00111	0.00	CVE-2022-33932