Read the docs
TI-2022-14940 Aliases CVE-2022-33936GHSA-r874-3p5x-25vw

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability.

Priority MEDIUM 44Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Cloud Mobility for Dell EMC Storage, 1.3.0.XXX contains a RCE vulnerability. A non-privileged user could potentially exploit this vulnerability, leading to achieving a root shell. This is a critical issue; so Dell recommends customers to upgrade at the earliest opportunity.

Why it matters now

EPSS 0.01071 65th percentileScored 2026-11-07
Fix Fixed Cloud Mobility for Dell Storage (Dell): 1.3.1

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellCloud Mobility for Dell Storagebefore 1.3.11.3.1Patch availableCNA
  • Cloud Mobility for Dell Storage VendorDell Affected before 1.3.1 Fixed in 1.3.1 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:dell:cloud_mobility_for_dell_emc_storage:1.3.0:*:*:*:*:*:*:*1.3.0VulnerableDell
  • cpe:2.3:a:dell:cloud_mobility_for_dell_emc_storage:1.3.0:*:*:*:*:*:*:* Versions 1.3.0 Vulnerable ·Dell

Remediation

  • Fix · CNA Cloud Mobility for Dell Storage (Dell) Fixed in 1.3.1

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-33936
  2. 2026-10-03 Alias added: GHSA-r874-3p5x-25vw

References

Advisory 1

  • TI-2022-15331 Improper authorization in Dell Cloud Mobility for Dell Storage CVSS 3.1MEDIUM 6.7
  • TI-2023-09504 Improper certificate validation in Dell Cloud Mobility for Dell Storage CVSS 3.1HIGH 7.0

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences