CVE-2022-45095 — Dell / PowerScale OneFS

Description (CNA)

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, information disclosure, and data deletion.

Affected (CNA)

Vendor / product	Versions
Dell / PowerScale OneFS	affected 8.2.x through 9.4.x

CWE

CWE-77

References

https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities

CISA-ADP

No English description supplied.

No references supplied.