8.2
CVE-2022-46756
- EPSS 0.06%
- Veröffentlicht 01.02.2023 06:15:09
- Zuletzt bearbeitet 21.11.2024 07:31:00
- Quelle security_alert@emc.com
- CVE-Watchlists
- Unerledigt
LoginDell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an attacker.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Vxrail Manager SwPlatformvmware_vcenter Version < 7.0.410
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.06% | 0.191 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.7 | 0.8 | 5.9 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
|
| security_alert@emc.com | 8.2 | 1.5 | 6 |
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
|
CWE-668 Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.