CVSS: 9.8EPSS: 0%CPEs: 3EXPL: 0CVE-2022-45101
https://notcve.org/view.php?id=CVE-2022-45101
Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution. • https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities • CWE-269: Improper Privilege Management CWE-274: Improper Handling of Insufficient Privileges •
CVSS: 7.5EPSS: 0%CPEs: 4EXPL: 0CVE-2022-34439
https://notcve.org/view.php?id=CVE-2022-34439
Dell PowerScale OneFS, versions 8.2.0.x-9.4.0.x contain allocation of Resources Without Limits or Throttling vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service and performance issue on that node. Dell PowerScale OneFS, versiones 8.2.0.x-9.4.0.x contienen una vulnerabilidad de Asignación de Recursos sin Límites o Estrangulamiento. Un atacante remoto no autenticado podría explotar esta vulnerabilidad, conllevando a una denegación de servicio y un problema de rendimiento en ese nodo • https://www.dell.com/support/kbdoc/en-us/000204053/dsa-2022-245-dell-emc-powerscale-onefs-security-update-for-multiple-security-updates • CWE-770: Allocation of Resources Without Limits or Throttling •
CVSS: 6.7EPSS: 0%CPEs: 4EXPL: 0CVE-2022-34438
https://notcve.org/view.php?id=CVE-2022-34438
Dell PowerScale OneFS, versions 8.2.x-9.4.0.x, contain a privilege context switching error. A local authenticated malicious user with high privileges could potentially exploit this vulnerability, leading to full system compromise. This impacts compliance mode clusters. Dell PowerScale OneFS, versiones 8.2.x-9.4.0.x, contienen un error de cambio de contexto de privilegios. Un usuario malicioso autenticado localmente con altos privilegios podría explotar esta vulnerabilidad, conllevando a un compromiso total del sistema. • https://www.dell.com/support/kbdoc/en-us/000204053/dsa-2022-245-dell-emc-powerscale-onefs-security-update-for-multiple-security-updates • CWE-269: Improper Privilege Management •
CVSS: 6.7EPSS: 0%CPEs: 3EXPL: 0CVE-2022-34437
https://notcve.org/view.php?id=CVE-2022-34437
Dell PowerScale OneFS, versions 8.2.2-9.3.0, contain an OS command injection vulnerability. A privileged local malicious user could potentially exploit this vulnerability, leading to a full system compromise. This impacts compliance mode clusters. Dell PowerScale OneFS, versiones 8.2.2-9.3.0, contienen una vulnerabilidad de inyección de comandos del Sistema Operativo. Un usuario local privilegiado y malicioso podría explotar esta vulnerabilidad, conllevando a un compromiso total del sistema. • https://www.dell.com/support/kbdoc/en-us/000204053/dsa-2022-245-dell-emc-powerscale-onefs-security-update-for-multiple-security-updates • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 6.7EPSS: 0%CPEs: 3EXPL: 0CVE-2022-31239
https://notcve.org/view.php?id=CVE-2022-31239
Dell PowerScale OneFS, versions 9.0.0 up to and including 9.1.0.19, 9.2.1.12, and 9.3.0.6, contain sensitive data in log files vulnerability. A privileged local user may potentially exploit this vulnerability, leading to disclosure of this sensitive data. Dell PowerScale OneFS, versiones 9.0.0 hasta 9.1.0.19, 9.2.1.12 y 9.3.0.6 incluyéndola, contienen una vulnerabilidad de datos confidenciales en archivos de registro. Un usuario local privilegiado podría explotar esta vulnerabilidad, conllevando a una divulgación de estos datos confidenciales • https://www.dell.com/support/kbdoc/en-us/000201094/dsa-2022-149-dell-emc-powerscale-onefs-security-update?lang=en • CWE-532: Insertion of Sensitive Information into Log File •