Lucene search

K
nvd[email protected]NVD:CVE-2023-25941
HistoryApr 04, 2023 - 11:15 a.m.

CVE-2023-25941

2023-04-0411:15:07
CWE-276
web.nvd.nist.gov
dell powerscale
onefs
elevation of privilege
vulnerability
compliance mode

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Dell PowerScale OneFS versions 8.2.x-9.5.0.x contain an elevation of privilege vulnerability. A low-privileged local attacker could potentially exploit this vulnerability, leading to Denial of service, escalation of privileges, and information disclosure. This vulnerability breaks the compliance mode guarantee.

Affected configurations

NVD
Node
dellemc_powerscale_onefsRange9.1.0.09.1.0.28
OR
dellemc_powerscale_onefsRange9.2.1.09.2.1.22
OR
dellemc_powerscale_onefsRange9.4.0.09.4.0.13

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

Related for NVD:CVE-2023-25941