Dell Emc Powerscale Onefs vulnerabilities, page 3
84 vulnerabilities
Known vulnerabilities in Dell Emc Powerscale Onefs, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
MediumCVE-2022-31238dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, 9.3.0.6, and 9.4.0.2, contain a process invoked with sensitive information vulnerability. A CLI user may potentially exploit this vulnerability, leading to information disclosure.EPSS0.18%MediumCVE-2022-31239dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to disclosure of this sensitive data.EPSS0.25%HighCVE-2022-46679dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS 8.2.x, 9.0.0.x - 9.4.0.x, contain an insufficient resource pool vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.EPSS0.77%HighCVE-2022-22549dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials.EPSS0.69%HighCVE-2022-22559dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm. An unprivileged network attacker could exploit this vulnerability, leading to the potential for information disclosure.EPSS0.59%HighCVE-2022-22560dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline.EPSS0.18%MediumCVE-2022-22565dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data.EPSS0.49%CriticalCVE-2022-22561dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts.EPSS1.41%HighCVE-2022-22562dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated network attacker could potentially exploit this denial-of-service vulnerability.EPSS0.93%MediumCVE-2022-22563dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd. A high-privileged user can exploit this vulnerability to not record information identifying the source of account information changes.EPSS0.22%MediumCVE-2022-22550dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over.EPSS0.23%HighCVE-2022-24411dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale Compliance Mode guarantees.EPSS0.24%HighCVE-2022-24412dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell EMC PowerScale OneFS 8.2.x - 9.3.0.x contain an improper handling of value vulnerability. An unprivileged network attacker could potentially exploit this vulnerability, leading to denial-of-service.EPSS1.01%MediumCVE-2022-24413dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 8.2.2-9.3.x, contain a time-of-check-to-time-of-use vulnerability. A local user with access to the filesystem could potentially exploit this vulnerability, leading to data loss.EPSS0.14%HighCVE-2022-24428dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation of privileges. A remote filesystem user with a local account could potentially exploit this vulnerability, leading to an escalation of file privileges and information disclosure.EPSS0.58%HighCVE-2022-45097dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network attacker could potentially exploit this vulnerability, leading to escalation of privileges, and information disclosure.EPSS0.41%MediumCVE-2022-45096dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, 8.2.0 through 9.3.0, contain an User Interface Security Issue. An unauthenticated remote user could unintentionally lead an administrator to enable this vulnerability, leading to disclosure of information.EPSS0.49%MediumCVE-2022-45095dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, information disclosure, and data deletion.EPSS0.64%CriticalCVE-2022-45101dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution.EPSS0.82%HighCVE-2022-45099dell · emc_powerscale_onefs +1 moredell emc_powerscale_onefsDell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromiseEPSS0.19%