Known vulnerabilities in Dell PowerScale OneFS
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2022-23161 | Dell PowerScale OneFS versions 8.2.x - 9.3.0.x contain a denial-of-service vulnerability in SmartConnect | 7.5 High | Apr 12, 2022 |
| CVE-2022-23160 | Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability | 5.4 Medium | Apr 12, 2022 |
| CVE-2022-23159 | Dell PowerScale OneFS, 8.2.2 - 9.3.0.x, contain a missing release of memory after effective lifetime vulnerability | 4.8 Medium | Apr 12, 2022 |
| CVE-2022-22565 | Dell PowerScale OneFS, versions 9.0.0-9.3.0, contain an improper authorization of index containing sensitive information | 4.7 Medium | Apr 12, 2022 |
| CVE-2022-22562 | Dell PowerScale OneFS, versions 8.2.0-9.3.0, contain a improper handling of missing values exploit | 7.5 High | Apr 12, 2022 |
| CVE-2022-22561 | Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contain an improper restriction of excessive authentication attempts | 8.1 High | Apr 12, 2022 |
| CVE-2022-22560 | Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials | 7.1 High | Apr 12, 2022 |
| CVE-2022-22559 | Dell PowerScale OneFS, version 9.3.0, contains a use of a broken or risky cryptographic algorithm | 7.5 High | Apr 12, 2022 |
| CVE-2022-22550 | Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability | 6.7 Medium | Apr 12, 2022 |
| CVE-2022-22549 | Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation | 7.5 High | Apr 12, 2022 |
| CVE-2022-26855 | Dell PowerScale OneFS, versions 8.2.x-9.3.0.x, contains an incorrect default permissions vulnerability | 5.5 Medium | Apr 8, 2022 |
| CVE-2022-26854 | Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain risky cryptographic algorithms | 8.1 High | Apr 8, 2022 |
| CVE-2022-26852 | Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator | 8.1 High | Apr 8, 2022 |
| CVE-2022-26851 | Dell PowerScale OneFS, 8.2.2-9.3.x, contains a predictable file name from observable state vulnerability | 9.1 Critical | Apr 8, 2022 |
| CVE-2022-24428 | Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation… | 6.3 Medium | Apr 8, 2022 |
| CVE-2022-22563 | Dell EMC Powerscale OneFS 8.2.x - 9.2.x omit security-relevant information in /etc/master.passwd | 4.4 Medium | Apr 8, 2022 |
| CVE-2021-36350 | Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the… | 5.9 Medium | Dec 21, 2021 |
| CVE-2021-21561 | Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability | 7.8 High | Nov 23, 2021 |
| CVE-2021-36305 | Dell PowerScale OneFS contains an Unsynchronized Access to Shared Data in a Multithreaded Context in SMB CA handling | 6.5 Medium | Nov 12, 2021 |
| CVE-2021-21528 | Dell EMC PowerScale OneFS versions 9.1.0, 9.2.0.x, 9.2.1.x contain an Exposure of Information through Directory… | 7.5 High | Nov 12, 2021 |
| CVE-2021-36282 | Dell EMC PowerScale OneFS versions 8.2.x - 9.1.0.x contain a use of uninitialized resource vulnerability | 2.5 Low | Aug 16, 2021 |
| CVE-2021-36281 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment vulnerability | 7.5 High | Aug 16, 2021 |
| CVE-2021-36280 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource… | 7.8 High | Aug 16, 2021 |
| CVE-2021-36279 | Dell EMC PowerScale OneFS versions 8.2.x - 9.2.x contain an incorrect permission assignment for critical resource… | 7.8 High | Aug 16, 2021 |
| CVE-2021-36278 | Dell EMC PowerScale OneFS versions 8.2.x, 9.1.0.x, and 9.1.1.1 contain a sensitive information exposure vulnerability in… | 8.1 High | Aug 16, 2021 |
Other Dell products
CPG BIOS 110
Secure Connect Gateway 5.0 - Appliance 104
Secure Connect Gateway 5.0 - Application 103
PowerProtect Data Domain 82
Unity 62
Wyse Management Suite 62
Secure Connect Gateway (SCG) Policy Manager 45
OpenManage Enterprise 41
PowerEdge Platform 32
SmartFabric OS10 Software 31
PowerProtect Data Manager 27
Alienware Command Center (AWCC) 25