Dell Unisphere for PowerMax vApp version 9.2.4.x contains a path traversal flaw (CWE-22) that allows a low-privileged, remote attacker to supply a crafted pathname to read files outside the intended directory. Successful exploitation exposes sensitive configuration or credential files, compromising confidentiality while leaving integrity and availability unaltered.

The vulnerability affects Dell Unisphere for PowerMax vApp version 9.2.4.x. Any installation of this version remains at risk until a patched update is applied.

The CVSS score of 6.5 signals moderate severity, and the EPSS score of < 1% indicates a low likelihood of exploitation. Attacks require remote access to the vApp without elevated privileges, and the flaw is not listed in the CISA KEV catalog. Although no publicly available exploit has been reported, the remote attack vector combined with the ability to read arbitrary files warrants immediate address.