OS Command Injection Risk in Dell Container Storage Modules

CVE-2022-34426

What is CVE-2022-34426?

Dell Container Storage Modules version 1.2 is vulnerable to an OS command injection due to improper limitations on pathname access in the goiscsi and gobrick libraries. This vulnerability allows remote unauthenticated attackers to exploit the system and potentially gain access to system paths that are meant to be restricted, thereby escalating their privileges and executing commands on the host system. Prompt updates and security measures are critical to mitigate this risk effectively.

References