CVE-2021-36338: 
Dell EMC Solutions Enabler vulnerability analysis and mitigation

Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability identified as CVE-2021-36338. The vulnerability was discovered in 2021 and affects Dell EMC's Unisphere for PowerMax software. A subsequent CVE (CVE-2022-31233) was later issued to address a partial fix of this vulnerability (CVE Mitre, Dell Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 6.3 (Medium) with the vector string CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N. This indicates that the vulnerability requires adjacent network access, low attack complexity, low privileges, and no user interaction to exploit. The impact primarily affects integrity (High) with some impact on confidentiality (Low) but no impact on availability (Dell Advisory).

If exploited, this vulnerability allows an adjacent malicious user to escalate their privileges and access functionalities they do not have permission to access. The vulnerability primarily impacts system integrity with high severity and has a low impact on confidentiality (Dell Advisory).

The vulnerability requires adjacent network access and low privileges to exploit. The attack complexity is considered low, and no user interaction is required for exploitation. The vulnerability was partially fixed initially, requiring a subsequent fix through CVE-2022-31233 (CVE Mitre).

Dell has released version 9.2.2.2 of Unisphere for PowerMax to address this vulnerability. Users are advised to upgrade to this version or later. A subsequent update (version 9.2.3.15) was also released to address the partial fix through CVE-2022-31233 (Dell Advisory).