Lucene search

DellCVE-2024-25965

HistoryMay 14, 2024 - 4:16 p.m.

CVE-2024-25965

2024-05-1416:16:14

CWE-73

dell

web.nvd.nist.gov

cve-2024-25965

dell powerscale onefs

denial of service

nvd

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service.

Affected configurations

Vulners

Node

dellpowerscale_onefsRange≤9.3.0.0

dellpowerscale_onefsRange≤9.4.0.17

dellpowerscale_onefsRange≤9.5.0.7

dellpowerscale_onefsRange≤9.7.0.1

dellpowerscale_onefsMatch9.7.0.2

VendorProductVersionCPE
dellpowerscale_onefs*cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*
dellpowerscale_onefs9.7.0.2cpe:2.3:a:dell:powerscale_onefs:9.7.0.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	powerscale_onefs	*	cpe:2.3:a:dell:powerscale_onefs::::::::
dell	powerscale_onefs	9.7.0.2	cpe:2.3:a:dell:powerscale_onefs:9.7.0.2:::::::*

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerScale OneFS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "9.3.0.0",
        "status": "affected",
        "version": "8.2.x",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.4.0.17",
        "status": "affected",
        "version": "9.4.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.5.0.7",
        "status": "affected",
        "version": "9.5.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.7.0.1",
        "status": "affected",
        "version": "9.6.0.x",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.7.0.2"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H

AI Score

6.6

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2024-25965