Summary
Ein Angreifer kann mehrere Schwachstellen in Dell PowerScale ausnutzen, um Sicherheitsvorkehrungen zu umgehen, um Informationen offenzulegen, um einen Denial of Service Angriff durchzuführen, und um Dateien zu manipulieren.
Product
PowerScale ist eine NAS-Plattform, die für die Verwaltung großer Datenmengen in unternehmenskritischen Umgebungen optimiert ist.
Vulnerabilities 4
-
Critical 9.8
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS exp…
-
High 7.5CVE-2024-39689 Public exploit
Certifi removes GLOBALTRUST root certificate
Certifi is a curated collection of Root Certificates for validating the trustworthiness of SSL certificates while verifying the identity of TLS hosts. Certifi starting in 2021.5.30 and prior to 2024.7.4 recognized root certificates from `GLOBALTRUST`. Certifi…
-
High 7.5
iperf v3.17.1 was discovered to contain a segmentation violation via the iperf_exchange_parameters() function.
-
Medium 5.3
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains an improper neutralization of special elements used …
Revision history
-
#1
Initiale Fassung
References
-
Dell Security Advisory DSA-2025-208 vom 2025-06-03
https://www.dell.com/support/kbdoc/de-de/000326339/dsa-2025-208-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities