Skip to content
OpenAdvisories
Medium WID-SEC-2024-1064 6 CVEs

Dell PowerScale: Mehrere Schwachstellen

Published May 7, 2024 · Updated May 7, 2024 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Dell PowerScale ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen, vertrauliche Informationen offenzulegen, Dateien zu manipulieren oder seine Rechte zu erweitern.

Product

PowerScale ist eine NAS-Plattform, die für die Verwaltung großer Datenmengen in unternehmenskritischen Umgebungen optimiert ist.

Vulnerabilities 6

  • Medium 6.7

    Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an execution with unnecessary privileges vulnerability. A…

  • Medium 6.5

    Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an improper input validation vulnerability. A low privile…

  • Medium 6.2

    Dell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an allocation of resources without limits or throttling v…

  • Medium 6.1

    Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A…

  • Medium 5.9

    Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains a use of a broken or risky cryptographic algorithm vulner…

  • Medium 5.3

    Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an improper handling of unexpected data type vulnerabilit…

Revision history

  1. #1

    Initiale Fassung

References