CVE-2021-21562: Untrusted Search Path

Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE and ISIPRIVSYSUPGRADE or ISIPRIVAUDIT to provide an untrusted path which can lead to run resources that are not under the application’s direct...

CVE-2021-21553: Incorrect User Management

Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest...

CVE-2021-21563: Improper Check for Unusual or Exceptional Conditions

Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an authenticated user with low-privileges to trigger a denial of service event...

PT-2021-14611

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.1.2 through 9.1.0.x Description The issue is related to an Improper Check for Unusual or Exceptional Conditions in the auditing component of Dell EMC PowerScale OneFS. This can lead to an authenticated user...

Dell Technologies Dell PowerScale OneFS代码问题漏洞

Dell PowerScale OneFS is a PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS has a security vulnerability that could be exploited by an attacker to gain elevated privileges on the system...

PT-2021-14601

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.1.0 through 9.1.0 Description The issue is related to an Incorrect User Management vulnerability. Under specific conditions, this vulnerability can allow the CompAdmin user to elevate privileges and break out o...

Dell Technologies Dell PowerScale OneFS 资源管理错误漏洞

Dell PowerScale OneFS is the PowerScale OneFS operating system that provides horizontal scaling NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by remote attackers to prevent SmartConnect DNS responses...

PT-2021-14613

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.1.0.3 and earlier Description The issue is a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS...

PT-2021-14610

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS affected versions not specified Description The issue allows a user with specific privileges, including ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE and ISI PRIV SYS UPGRADE or ISI PRIV AUDIT, to provide an untrusted...

DELL EMC PowerScale 代码问题漏洞

A code issue vulnerability exists in Dell EMC PowerScale OneFS, a laterally scalable storage system for unstructured data from Dell DELL, U.S.A. The vulnerability stems from improper inspection of anomalies or exceptions. An authenticated attacker with low privileges could exploit the vulnerabili...

CVE-2021-21565: Uncontrolled Resource Consumption

Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses...

CVE-2020-5353

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System NFS allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier UID over NFS to rewrite sensitive files to gain...

CVE-2020-5353

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System NFS allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier UID over NFS to rewrite sensitive files to gain...

CVE-2020-5353

The CVE concerns Dell Isilon OneFS (versions 8.2.2 and earlier) and Dell EMC PowerScale OneFS (version 9.0.0) where the default NFS configuration exposes the admin home directory. An attacker may abuse a forged UID over NFS to rewrite sensitive files, granting administrative access. The issue is ...

DELL Dell EMC Isilon OneFS 和 EMC PowerScale 安全漏洞

DELL Dell EMC Isilon OneFS and EMC PowerScale are both a set of horizontally scalable storage systems for unstructured data from Dell USA. A security vulnerability exists in Dell Isilon OneFS 8.2.2 and prior versions and Dell EMC PowerScale OneFS 9.0.0 and prior versions. The vulnerability stems...

PT-2021-12398

Name of the Vulnerable Software and Affected Versions Dell Isilon OneFS versions 8.2.2 and earlier Dell EMC PowerScale OneFS version 9.0.0 Description The default configuration for Network File System NFS in the affected software allows access to an 'admin' home directory. An attacker may leverag...

CVE-2020-5353: Incorrect Default Permissions

The Dell Isilon OneFS versions 8.2.2 and earlier and Dell EMC PowerScale OneFS version 9.0.0 default configuration for Network File System NFS allows access to an 'admin' home directory. An attacker may leverage a spoofed Unique Identifier UID over NFS to rewrite sensitive files to gain...

CVE-2020-26180

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols...

Design/Logic Flaw

Dell EMC Isilon OneFS supported versions 8.1 and later and Dell EMC PowerScale OneFS supported version 9.0.0 contain an access issue with the remotesupport user account. A remote malicious user with low privileges may gain access to data stored on the /ifs directory through most protocols...

CVE-2020-26180

CVE-2020-26180 affects Dell EMC Isilon OneFS (8.1+), and Dell EMC PowerScale OneFS (9.0.0). The root cause is an access issue tied to the remotesupport user account, allowing a remote, low-privilege attacker to access data under the /ifs directory via most protocols. The documents do not provide ...