CVE-2022-24411

Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale...

CVE-2022-24411

Dell PowerScale OneFS CVE-2022-24411 affects PowerScale OneFS 8.2.2 and newer. The root cause is an incorrect programmatic call to a high‑level native procedure, enabling a local attacker to achieve elevation of privilege (with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE), potentially bypass...

CVE-2022-23163

Dell PowerScale OneFS (versions 8.2.x, 9.1.0.x, 9.2.1.x, 9.3.0.x) is affected by a denial-of-service vulnerability reported as CVE-2022-23163. The connected documents consistently describe a local attack that could cause data unavailability, but do not provide the underlying root cause details or...

CVE-2022-23163

Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability, leading to denial of service/data unavailability...

CVE-2022-23161

Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect. An unprivileged network attacker may potentially exploit this vulnerability, leading to denial-of-service...

CVE-2022-23161

Dell PowerScale OneFS (versions 8.2.x–9.3.0.x) contains a denial-of-service flaw in SmartConnect caused by improper handling of incoming error messages. An unprivileged network attacker can trigger a DoS, with impact described as availability loss (CVE-2022-23161). The NVD metrics show CVSSv3.1 b...

CVE-2022-23160

Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulnerability, leading to gaining write permissions on read-only files...

CVE-2022-23160

Dell PowerScale OneFS (versions 8.2.0–9.3.0) contains an Improper Handling of Insufficient Permissions vulnerability that could allow a remote attacker to gain write permissions on read‑only files. The CVE entry is supported by connected records indicating PowerScale OneFS as affected and the imp...

CVE-2022-23159

Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE and ISIPRIVAUTHPROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can...

CVE-2022-23159

Technical details about CVE-2022-23159 are not publicly provided in the supplied documents; monitor for updates from Dell and CVE sources.

CVE-2022-22565

Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data...

CVE-2022-22565

CVE-2022-22565 affects Dell PowerScale OneFS 9.0.0–9.3.0. The issue is an improper authorization of an index containing sensitive information, allowing an authenticated privileged user to disclose or modify sensitive data. The vulnerable component is associated with the OneFS operating system’s i...

CVE-2022-22562

Dell PowerScale OneFS (versions 8.2.0–9.3.0) is affected by a vulnerability described as improper handling of missing values, enabling an unauthenticated network attacker to cause a denial-of-service. This aligns with multiple CVE sources, including NVD and CNVD entries. The connected documents c...

CVE-2022-22562

Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated network attacker could potentially exploit this denial-of-service vulnerability...

CVE-2022-22561

Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts...

CVE-2022-22561

Technical details (affected versions, root cause, impact, or fix) are not provided in the connected documents. The initial CVE description mentions a brute-force risk but no public technical specifics are included here. Monitor for updates.

CVE-2022-22560

Dell EMC PowerScale OneFS 8.1.x–9.1.x is affected by a vulnerability due to hard coded credentials that allow a locally authenticated attacker to log in as the admin user to the backend Ethernet switch of a PowerScale cluster, potentially taking the switch offline. Root cause: hard coded credenti...

CVE-2022-22560

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline...

CVE-2022-22559

Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged network attacker could exploit this vulnerability, leading to the potential for information disclosure...

CVE-2022-22559

Dell PowerScale OneFS 9.3.0 contains a vulnerability due to the use of a broken or risky cryptographic algorithm that could allow an unprivileged network attacker to cause information disclosure. The connected documents confirm the affected product and version and describe the impact as informati...