Code Injection Vulnerability in Dell EMC Metro Node Software
CVE-2022-34456

8.8HIGH

Key Information:

Vendor

Dell
Status
Metro Node
Vendor
CVE Published:
18 January 2023

What is CVE-2022-34456?

Dell EMC Metro Node versions prior to 7.1 are susceptible to a code injection vulnerability that allows authenticated nonprivileged attackers to execute arbitrary operating system commands. This breach can lead to significant security risks, as it grants the potential for unauthorized access and manipulation of the server environment.

Affected Version(s)

Metro node 0 < 7.1

References

https://www.dell.com/support/kbdoc/en-us/000204057/dsa-20...
vendor-advisory

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.