Dell PowerScale OneFS Denial of Service Vulnerability (CNVD-2022-32826)

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides a horizontally scalable NAS. a denial of service vulnerability exists in Dell EMC PowerScale OneFS, which stems from improper handling of value vulnerabilities. An unauthenticated, remote attacker could exploit this...

Hardcoded credentials

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...

CVE-2022-24412

Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to denial-of-service...

PT-2022-16680

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.3.0.x Description The issue is related to an improper handling of value, which could be exploited by an unprivileged network attacker, potentially leading to denial-of-service. Recommendations...

CVE-2022-22560: Use of Hard-coded Credentials

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...

CVE-2022-24412: Improper Handling of Values

Dell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to denial-of-service...

PT-2022-15531

Name of the Vulnerable Software and Affected Versions Dell EMC Powerscale OneFS versions 8.2.x through 9.2.x Description A high-privileged user can exploit this issue to not record information identifying the source of account information changes, as security-relevant information is omitted in...

CVE-2022-22563: Omission of Security-relevant Information

Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes...

CVE-2021-21528

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, and 9.2.1.x have an Exposure of Information through Directory Listing vulnerability. The flaw is triggered during upgrading from older versions and allows access to information via directory listings over the network. The CVSS data in the sources...

PT-2021-14578

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x Description The issue is related to an Exposure of Information through Directory Listing. This problem occurs when upgrading from a previous version. Recommendations For versions 9.1.0...

CVE-2021-21528: Exposure of Information Through Directory Listing

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgrading from a previous versions...

Dell EMC PowerScale OneFS Privilege Assignment Incorrect Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect privilege assignment. An attacker could exploit this vulnerability to elevate privileges...

Dell EMC PowerScale OneFS Insufficient Logging Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to insufficient logging. An attacker could exploit this vulnerability to make unaudited and untraceable configuration changes to settings that their role is authorized to change...

CVE-2021-36279

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource vulnerability. This could allow a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE to access privileged information about the cluster...

CVE-2021-21592

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x improperly handle an exceptional condition. A remote low privileged user could potentially exploit this vulnerability, leading to unauthorized information disclosure...

PT-2021-14638

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.1.1.x Description The issue is related to an improper neutralization of special elements used in an OS command, which could allow the compadmin user to elevate privileges. This affects Smartlo...

CVE-2021-36282: Use of Uninitialized Resource

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability. This can potentially allow an authenticated user with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges to gain access up to 24 bytes of data within the /ifs kernel stack under certain...

PT-2021-21196

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment for a critical resource. This could allow a user with ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE privileges to acce...

PT-2021-21199

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to an incorrect permission assignment, which can be exploited by a low-privileged authenticated user to escalate privileges. Recommendations For Dell EMC...

PT-2021-14636

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.2.x through 9.2.x Description The issue is related to improper handling of an exceptional condition, which could be exploited by a remote low privileged user, potentially leading to unauthorized information...