Skip to content
OpenAdvisories
High · 7.1 CVE-2022-22560 EUVD-2022-27706GHSA-565r-g429-cpfj

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login…

Published Apr 12, 2022 · Updated Sep 16, 2024 · Assigned by dell

Vendor: Dell Product: PowerScale OneFS

Description

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline.

Affected products

VendorProductAffectedFixed
Dell PowerScale OneFS 8.1.x-9.2.1.x —

References