Dell Container Storage Modules vulnerabilities

CVE-2022-34427 [HIGH] CWE-78 CVE-2022-34427: Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries Dell Container Storage Modules 1.2 contains an OS Command Injection in goiscsi and gobrick libraries. A remote unauthenticated attacker could exploit this vulnerability leading to modification of intended OS command execution.

CVE-2022-34426 [HIGH] CWE-22 CVE-2022-34426: Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Dir Dell Container Storage Modules 1.2 contains an Improper Limitation of a Pathname to a Restricted Directory in goiscsi and gobrick libraries which could lead to OS command injection. A remote unauthenticated attacker could exploit this vulnerability leading to unintentional access to path outside of restricted directory.

CVE-2022-34374 [HIGH] CWE-78 CVE-2022-34374: Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries Dell Container Storage Modules 1.2 contains an OS command injection in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to to execute arbitrary OS commands on the affected system.

CVE-2022-34375 [MEDIUM] CWE-22 CVE-2022-34375: Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick li Dell Container Storage Modules 1.2 contains a path traversal vulnerability in goiscsi and gobrick libraries. A remote authenticated malicious user with low privileges could exploit this vulnerability leading to unintentional access to path outside of restricted directory.