CVE-2024-24901: Insufficient Logging

Dell PowerScale OneFS 8.2.x through 9.6.0.x contain an insufficient logging vulnerability. A local malicious user with high privileges could potentially exploit this vulnerability, causing audit messages lost and not recorded for a specific time period...

CVE-2024-22463: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. A remote unprivileged attacker could potentially exploit this vulnerability, leading to compromise of confidentiality and integrity of sensitive information...

PT-2024-2132

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.6.0.x Description The issue is related to the use of a broken or risky cryptographic algorithm, which could be exploited by a remote unprivileged attacker. This exploitation could lead to the...

PT-2024-2137

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.6.0.x Description The issue is related to insufficient logging in the operating system, which could allow a local malicious user with high privileges to exploit it, potentially causing audit...

PT-2024-2552 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.4.0.x through 9.7.0.x Description: The issue is related to the insertion of sensitive information into log files, which could be exploited by a low-privileged local attacker. This exploitation may lead to the...

Dell PowerScale OneFS elevation of privilege vulnerability (CNVD-2024-16933)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x. The vulnerability is due to an authentication...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

Design/Logic Flaw

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

Authentication flaw

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x–9.6.0.x are affected by an incorrect default permissions vulnerability. The root cause is improper/default permissions settings that a local, low-privilege attacker could abuse to cause a denial of service. Documents across sources consistently identify the af...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22430

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x have a missing authentication for a critical function, allowing a low-privileged local attacker to gain elevated access. Public sources (NVD/CNVD/PRION/PT security) confirm an elevation of privilege risk but do not provide exploit details or ...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

CVE-2024-22449

Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x contains a missing authentication for critical function vulnerability. A low privileged local malicious user could potentially exploit this vulnerability to gain elevated access...

Dell PowerScale OneFS Access Control Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS versions 9.0.0.x through 9.6.0.x. The vulnerability is due to an authentication...

CVE-2024-22430: Incorrect Default Permissions

Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service...