Improper Authentication Management in Dell EMC PowerStore Manager

CVE-2022-31234

Summary

Dell EMC PowerStore's Manager GUI exhibits an improper restriction of excessive authentication attempts, which could be exploited by a remote unauthenticated attacker. This vulnerability allows attackers to perform brute-force password attacks, potentially leading to account compromises, especially if users have weak passwords. It is crucial for users to adopt strong password policies to mitigate the risk of unauthorized access.

References