Design/Logic Flaw

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

CVE-2021-36315

CVE-2021-36315 affects Dell EMC PowerScale Nodes due to a hardware design flaw that can allow a local unauthenticated user to escalate privileges. The vulnerability also impacts Compliance mode clusters, where it is listed as critical. CVSSv3.1 vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with a b...

CVE-2021-36315

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

CVE-2021-36305

Dell PowerScale OneFS is affected by CVE-2021-36305 due to unsynchronized access to shared data in a multithreaded SMB CA handling path. The vulnerability could allow an authenticated SMB user on a cluster with CA to cause a denial of service over SMB. The provided documents describe the issue an...

CVE-2021-36305

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB...

CVE-2021-21528

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory Listing vulnerability. This vulnerability is triggered when upgrading from a previous versions...

CVE-2021-21528

Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, and 9.2.1.x have an Exposure of Information through Directory Listing vulnerability. The flaw is triggered during upgrading from older versions and allows access to information via directory listings over the network. The CVSS data in the sources...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell Technologies Dell PowerScale OneFS is an operating system from Dell Technologies, Inc. Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.0, 9.2.1.0 contain a security vulnerability that could be exploited by an attacker to gain access to information via directory listings...

EMC PowerScale 安全漏洞

DELL EMC PowerScale is a horizontally scalable storage system for unstructured data from Dell USA. A security vulnerability exists in Dell EMC PowerScale that stems from a hardware design flaw in the Dell EMC PowerScale node. An attacker could exploit the vulnerability to cause a user to escalate...

Dell Technologies Dell PowerScale OneFS 安全漏洞

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS that stems from Dell PowerScale OneFS containing asynchronous access to shared data in the context of multi-threaded SMB CA processing. An...

CVE-2021-36315

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity...

CVE-2021-36305

Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling. An authenticated user of SMB on a cluster with CA could potentially exploit this vulnerability, leading to a denial of service over SMB...

Dell EMC PowerScale OneFS Information Disclosure Vulnerability (CNVD-2021-73938)

Dell EMC PowerScale OneFS is an API-driven file system. an information disclosure vulnerability exists in Dell EMC PowerScale OneFS versions 8.2.-9.2.. The vulnerability stems from improper handling of exception conditions. An attacker could use the vulnerability to obtain information out of...

Dell EMC PowerScale OneFS has an unspecified vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.1.0. of Dell EMC PowerScale OneFS is vulnerable to the use of uninitialized resources. No details of the vulnerability are currently available...

Dell EMC PowerScale OneFS Elevation of Privilege Vulnerability

Dell EMC PowerScale OneFS is an API-powered file system. A vulnerability exists in Dell EMC PowerScale OneFS versions 8.2. - 9.2. in which critical resource permissions are incorrectly assigned. An attacker could exploit this vulnerability to gain unauthorized access to cluster-related informatio...

Dell EMC PowerScale OneFS OS Command Injection Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2.1. of Dell EMC PowerScale OneFS is vulnerable to OS command injection. An attacker with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges can exploit this vulnerability to elevate privileges and evade compliance assurance...

Dell EMC PowerScale OneFS Privilege Assignment Incorrect Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect privilege assignment. An attacker could exploit this vulnerability to elevate privileges...

Dell EMC PowerScale OneFS has an unspecified vulnerability (CNVD-2021-73944)

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect critical resource privilege assignment. An attacker could use this vulnerability to gain unauthorized access to cluster-related information...

Dell EMC PowerScale OneFS Information Disclosure Vulnerability

Dell EMC PowerScale OneFS, an API-driven file system, is vulnerable to an information disclosure in Dell EMC PowerScale OneFS version 8.2.2-9.1.0.. The vulnerability stems from the product's use of a get request method with a sensitive query string. An attacker could exploit the vulnerability to...

Dell EMC PowerScale OneFS Information Disclosure Vulnerability

Dell EMC PowerScale OneFS is an API-powered file system. An information disclosure vulnerability exists in Dell EMC PowerScale OneFS versions 8.2., 9.1.0.. The vulnerability stems from log files that include sensitive information. An attacker could exploit the vulnerability to gain unauthorized...