Lucene search

K
nvd[email protected]NVD:CVE-2023-32487
HistoryAug 16, 2023 - 2:15 p.m.

CVE-2023-32487

2023-08-1614:15:11
CWE-269
web.nvd.nist.gov
4
dell powerscale onefs
8.2.x - 9.5.0.x
denial of service
code execution
information disclosure
local attacker

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Dell PowerScale OneFS, 8.2.x - 9.5.0.x, contains an elevation of privilege vulnerability. A low privileged local attacker could potentially exploit this vulnerability, leading to denial of service, code execution and information disclosure.

Affected configurations

Nvd
Node
dellpowerscale_onefsRange9.2.1.09.2.1.22
OR
dellpowerscale_onefsRange9.4.0.09.4.0.13
OR
dellpowerscale_onefsRange9.5.0.09.5.0.3
VendorProductVersionCPE
dellpowerscale_onefs*cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2023-32487