CVE-2022-46756

HIGH

Dell VxRail < 7.0.410 - Container Escape and OS Command Execution

Title source: llm
STIX 2.1

Description

Dell VxRail, versions prior to 7.0.410, contain a Container Escape Vulnerability. A local high-privileged attacker could potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the container's underlying OS. Exploitation may lead to a system take over by an attacker.

References (1)

Core 1
Core References
Vendor Advisory vendor-advisory
https://www.dell.com/support/kbdoc/000206943

Scores

CVSS v3 8.2
EPSS 0.0006
EPSS Percentile 20.1%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-668
Status published
Products (1)
dell/vxrail_manager < 7.0.410
Published Feb 01, 2023
Tracked Since Feb 18, 2026