CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-24411
https://notcve.org/view.php?id=CVE-2022-24411
Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exploit this vulnerability, leading to elevation of privilege. This could potentially allow users to circumvent PowerScale Compliance Mode guarantees. Dell PowerScale OneFS versiones 8.2.2 y superiores, contienen una vulnerabilidad de elevación de privilegios. Un atacante local con ISI_PRIV_LOGIN_SSH y/o ISI_PRIV_LOGIN_CONSOLE podría explotar esta vulnerabilidad, conllevando a una elevación de privilegios. • https://www.dell.com/support/kbdoc/000196657 • CWE-378: Creation of Temporary File With Insecure Permissions CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23163
https://notcve.org/view.php?id=CVE-2022-23163
Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability, leading to denial of service/data unavailability. Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x y 9.3.0.x, contienen una vulnerabilidad de denegación de servicio. Un usuario local malicioso podría explotar esta vulnerabilidad, conllevando a una denegación de servicio o indisponibilidad de datos • https://www.dell.com/support/kbdoc/000196009 • CWE-379: Creation of Temporary File in Directory with Insecure Permissions CWE-668: Exposure of Resource to Wrong Sphere •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23161
https://notcve.org/view.php?id=CVE-2022-23161
Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect. An unprivileged network attacker may potentially exploit this vulnerability, leading to denial-of-service. Las versiones 8.2.x - 9.3.0.x de Dell PowerScale OneFS contienen una vulnerabilidad de denegación de servicio en SmartConnect. Un atacante de red sin privilegios puede explotar potencialmente esta vulnerabilidad, llevando a la denegación de servicio • https://www.dell.com/support/kbdoc/000196009 • CWE-755: Improper Handling of Exceptional Conditions •
CVSS: 5.4EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23160
https://notcve.org/view.php?id=CVE-2022-23160
Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulnerability, leading to gaining write permissions on read-only files. Dell PowerScale OneFS, versiones 8.2.0-9.3.0, contiene una vulnerabilidad de manejo inapropiado de permisos insuficientes. Un usuario malicioso remoto podría explotar esta vulnerabilidad, conllevando a una obtención de permisos de escritura en archivos de sólo lectura • https://www.dell.com/support/kbdoc/000196009 • CWE-269: Improper Privilege Management CWE-274: Improper Handling of Insufficient Privileges •
CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23159
https://notcve.org/view.php?id=CVE-2022-23159
Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE and ISI_PRIV_AUTH_PROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can also impact a cluster in Compliance mode. Dell recommends to update at the earliest opportunity. Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contiene una vulnerabilidad de falta de liberación de memoria después del tiempo de vida efectivo. • https://www.dell.com/support/kbdoc/000196009 • CWE-401: Missing Release of Memory after Effective Lifetime •