Denial of service

Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability, leading to denial of service/data unavailability...

Input validation

Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulnerability, leading to gaining write permissions on read-only files...

Input validation

Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials...

Authorization

Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data...

Design/Logic Flaw

Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over...

Code injection

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

Design/Logic Flaw

Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss...

CVE-2022-24413

Dell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss...

CVE-2022-24411

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale...

CVE-2022-24411

Dell PowerScale OneFS CVE-2022-24411 affects PowerScale OneFS 8.2.2 and newer. The root cause is an incorrect programmatic call to a high‑level native procedure, enabling a local attacker to achieve elevation of privilege (with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE), potentially bypass...

CVE-2022-23163

Dell PowerScale OneFS (versions 8.2.x, 9.1.0.x, 9.2.1.x, 9.3.0.x) is affected by a denial-of-service vulnerability reported as CVE-2022-23163. The connected documents consistently describe a local attack that could cause data unavailability, but do not provide the underlying root cause details or...

CVE-2022-23163

Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability, leading to denial of service/data unavailability...

CVE-2022-23161

Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect. An unprivileged network attacker may potentially exploit this vulnerability, leading to denial-of-service...

CVE-2022-23161

Dell PowerScale OneFS (versions 8.2.x–9.3.0.x) contains a denial-of-service flaw in SmartConnect caused by improper handling of incoming error messages. An unprivileged network attacker can trigger a DoS, with impact described as availability loss (CVE-2022-23161). The NVD metrics show CVSSv3.1 b...

CVE-2022-23160

Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulnerability, leading to gaining write permissions on read-only files...

CVE-2022-23160

Dell PowerScale OneFS (versions 8.2.0–9.3.0) contains an Improper Handling of Insufficient Permissions vulnerability that could allow a remote attacker to gain write permissions on read‑only files. The CVE entry is supported by connected records indicating PowerScale OneFS as affected and the imp...

CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

CVE-2022-22565

Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data...

CVE-2022-22565

CVE-2022-22565 affects Dell PowerScale OneFS 9.0.0–9.3.0. The issue is an improper authorization of an index containing sensitive information, allowing an authenticated privileged user to disclose or modify sensitive data. The vulnerable component is associated with the OneFS operating system’s i...

CVE-2022-22562

Dell PowerScale OneFS (versions 8.2.0–9.3.0) is affected by a vulnerability described as improper handling of missing values, enabling an unauthenticated network attacker to cause a denial-of-service. This aligns with multiple CVE sources, including NVD and CNVD entries. The connected documents c...