Code injection

2023-02-0106:15:00

PRIOn knowledge base

www.prio-n.com

dell powerscale

onefs

vulnerability

ndmp

password

compromise

7.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise

CPENameOperatorVersion
emc_powerscale_onefsge9.2.1.0
emc_powerscale_onefslt9.2.1.18
emc_powerscale_onefsge9.4.0.0
emc_powerscale_onefslt9.4.0.9
emc_powerscale_onefsge9.1.0.0
emc_powerscale_onefslt9.1.0.24
emc_powerscale_onefsge9.3.0.0
emc_powerscale_onefslt9.3.0.7

Name	Operator	Version
emc_powerscale_onefs	ge	9.2.1.0
emc_powerscale_onefs	lt	9.2.1.18
emc_powerscale_onefs	ge	9.4.0.0
emc_powerscale_onefs	lt	9.4.0.9
emc_powerscale_onefs	ge	9.1.0.0
emc_powerscale_onefs	lt	9.1.0.24
emc_powerscale_onefs	ge	9.3.0.0
emc_powerscale_onefs	lt	9.3.0.7