CVSS: 6.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-23159
https://notcve.org/view.php?id=CVE-2022-23159
Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability. An authenticated user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE and ISI_PRIV_AUTH_PROVIDERS privileges could exploit this vulnerability, leading to a Denial-Of-Service. This can also impact a cluster in Compliance mode. Dell recommends to update at the earliest opportunity. Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contiene una vulnerabilidad de falta de liberación de memoria después del tiempo de vida efectivo. • https://www.dell.com/support/kbdoc/000196009 • CWE-401: Missing Release of Memory after Effective Lifetime •
CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22565
https://notcve.org/view.php?id=CVE-2022-22565
Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information. An authenticated and privileged user could potentially exploit this vulnerability, leading to disclosure or modification of sensitive data. Dell PowerScale OneFS, versiones 9.0.0-9.3.0, contienen una autorización inapropiada de índice que contiene información confidencial. Un usuario autenticado y con privilegios podría explotar esta vulnerabilidad, conllevando a una divulgación o modificación de datos confidenciales • https://www.dell.com/support/kbdoc/000195815 • CWE-612: Improper Authorization of Index Containing Sensitive Information •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22562
https://notcve.org/view.php?id=CVE-2022-22562
Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit. An unauthenticated network attacker could potentially exploit this denial-of-service vulnerability. Dell PowerScale OneFS, versiones 8.2.0-9.3.0, contienen una explotación de manejo inapropiado de valores perdidos. Un atacante de red no autenticado podría explotar esta vulnerabilidad de denegación de servicio • https://www.dell.com/support/kbdoc/000195815 • CWE-229: Improper Handling of Values •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22561
https://notcve.org/view.php?id=CVE-2022-22561
Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to compromised accounts. Dell PowerScale OneFS, versiones 8.2.x-9.3.0.x, contienen una restricción inapropiada de intentos de autenticación excesivos. Un atacante remoto no autenticado podría explotar esta vulnerabilidad, conllevando a cuentas comprometidas • https://www.dell.com/support/kbdoc/000195815 • CWE-307: Improper Restriction of Excessive Authentication Attempts •
CVSS: 7.1EPSS: 0%CPEs: 1EXPL: 0CVE-2022-22560
https://notcve.org/view.php?id=CVE-2022-22560
Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline. Dell EMC PowerScale OneFS 8.1.x - 9.1.x contienen credenciales embebidas. Esto permite a un usuario local con conocimiento de las credenciales iniciar sesión como usuario administrador en el conmutador ethernet backend de un clúster PowerScale. • https://www.dell.com/support/kbdoc/000195815 • CWE-798: Use of Hard-coded Credentials •