CVE-2022-34454

CVE-2022-34454 affects Dell PowerScale OneFS versions 8.2.x–9.3.x with a heap-based buffer overflow in processing untrusted input, enabling a local privileged attacker to potentially take over the system. Impact is noted for compliance mode clusters. Root cause described as a boundary/heap-relate...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

CVE-2022-34454

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

Dell PowerScale OneFS Command Injection Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a command injection vulnerability that can be exploited by attackers to cause arbitrary command execution, denial of service, information disclosure, and data deletion...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12616)

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides horizontal scale-out NAS. versions 8.2.0 to 9.3.0 of Dell PowerScale OneFS contain a security vulnerability that could be exploited by a remote, unauthenticated attacker to cause...

CVE-2022-34445: Weak Encoding for Password

Dell PowerScale OneFS, versions 8.2.x through 9.3.x contain a weak encoding for a password. A malicious local privileged attacker may potentially exploit this vulnerability, leading to information disclosure...

PT-2023-13405 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: The issue concerns a weak encoding for a password in Dell PowerScale OneFS. A malicious local privileged attacker may potentially exploit this, leading to information disclosure...

PT-2023-13414 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.3.x Description: A heap-based buffer overflow exists, which a local privileged malicious user could potentially exploit to take over the system. This issue affects compliance mode clusters...

Dell PowerScale OneFS Cross-site Scripting Vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a cross-site scripting vulnerability that can be exploited by attackers to store malicious HTML or JavaScript code via multiple affected fields...

CVE-2022-33934: Improper Neutralization of Input During Web Page Generation

Dell PowerScale OneFS, versions 8.2.x through 9.4.x contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected fields...

CVE-2022-34454: Heap-based Buffer Overflow

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a heap-based buffer overflow. A local privileged malicious user could potentially exploit this vulnerability, leading to system takeover. This impacts compliance mode clusters...

Dell PowerScale OneFS buffer error vulnerability

Dell PowerScale OneFS is an operating system from Dell USA Inc. PowerScale OneFS operating system that provides a horizontally scalable NAS. Dell PowerScale OneFS suffers from a buffer overflow vulnerability that stems from a boundary error when processing untrusted input, which can be exploited ...

PT-2023-13404 · Dell · Dell Powerscale Onefs

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 9.2.0.x through 9.4.0.x Description: The issue is an information vulnerability that could be exploited by a remote unauthenticated attacker to cause a data leak. Recommendations: For Dell PowerScale OneFS versio...

CVE-2022-34444: Use of a Broken or Risky Cryptographic Algorithm

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

PT-2023-13324

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.4.x Description The issue concerns stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges may potentially exploit these vulnerabilities to store...

Dell PowerScale OneFS Information Disclosure Vulnerability (CNVD-2023-12619)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is an information disclosure vulnerability that can be exploited by an authenticated, local attacker to obtain sensitive information stored in plaintext...

Dell PowerScale OneFS Denial of Service Vulnerability (CNVD-2023-12618)

Dell PowerScale OneFS is an operating system from Dell USA Inc. Dell PowerScale OneFS is a denial of service vulnerability that can be exploited by remote, unauthenticated attackers to cause a denial of service...

Dell PowerScale OneFS User Management Error Vulnerability

Dell PowerScale OneFS is a U.S. Dell Dell PowerScale OneFS operating system that provides scale-out NAS. Dell PowerScale OneFS is vulnerable to a user management error that can be exploited by low-privilege attackers to cause privilege escalation and information disclosure...

Dell PowerScale OneFS weak encryption vulnerability

Dell PowerScale OneFS, a Dell USA company that provides the PowerScale OneFS operating system for scale-out NAS, has a weak encryption vulnerability that could be exploited by a local attacker with privileges to compromise the entire system...

Dell PowerScale OneFS has an unspecified vulnerability (CNVD-2023-12621)

Dell PowerScale OneFS is a U.S. based Dell Dell company that provides the PowerScale OneFS operating system for scale-out NAS. Dell PowerScale OneFS has a security vulnerability that can be exploited by remote, unauthenticated attackers to cause information disclosure and remote execution...