Command injection

2022-10-2118:15:00

PRIOn knowledge base

www.prio-n.com

dell powerscale onefs

version 8.2.2-9.3.0

os command injection

privileged local user

system compromise

compliance mode clusters

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

13.1%

JSON

Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters.

CPENameOperatorVersion
emc_powerscale_onefsge9.1.0.0
emc_powerscale_onefsle9.1.0.21
emc_powerscale_onefsge9.2.1.0
emc_powerscale_onefsle9.2.1.15
emc_powerscale_onefsge9.3.0.0
emc_powerscale_onefsle9.3.0.7

Name	Operator	Version
emc_powerscale_onefs	ge	9.1.0.0
emc_powerscale_onefs	le	9.1.0.21
emc_powerscale_onefs	ge	9.2.1.0
emc_powerscale_onefs	le	9.2.1.15
emc_powerscale_onefs	ge	9.3.0.0
emc_powerscale_onefs	le	9.3.0.7