Lucene search

DellCVELIST:CVE-2024-25965

HistoryMay 14, 2024 - 7:16 a.m.

CVE-2024-25965

2024-05-1407:16:55

CWE-73

dell

www.cve.org

cve-2024-25965

dell powerscale onefs

file control vulnerability

denial of service

local attacker

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H

EPSS

Percentile

9.0%

JSON

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "PowerScale OneFS",
    "vendor": "Dell",
    "versions": [
      {
        "lessThanOrEqual": "9.3.0.0",
        "status": "affected",
        "version": "8.2.x",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.4.0.17",
        "status": "affected",
        "version": "9.4.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.5.0.7",
        "status": "affected",
        "version": "9.5.0.0",
        "versionType": "semver"
      },
      {
        "lessThanOrEqual": "9.7.0.1",
        "status": "affected",
        "version": "9.6.0.x",
        "versionType": "semver"
      },
      {
        "status": "affected",
        "version": "9.7.0.2"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities

CVSS3

6.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H

EPSS

Percentile

9.0%

JSON

Related for CVELIST:CVE-2024-25965