CVEvulnerability

CVE-2022-45095

6.7 MEDIUM Published 2023-02-01 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2023-02-01
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-77

Description

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, information disclosure, and data deletion.

Affected configurations

• dell emc powerscale onefs (>= 9.1.0.0 < 9.1.0.25) • dell emc powerscale onefs (>= 9.2.1.0 < 9.2.1.18) • dell emc powerscale onefs (>= 9.4.0.0 < 9.4.0.9)

Related

Weakness · CWE (1)

  • CWE-77 Improper Neutralization of Special Elements used in a Command weakness

References