CVE-2022-45101

CWE-274CWE-269 — Improper Privilege Management3 documents3 sources
Severity
9.8CRITICAL
EPSS
4.2%
top 11.23%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Dell EMC Powerscale OnefsDell Powerscale Onefs
Timeline
PublishedFeb 1

Description

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to information disclosure and remote execution.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LExploitability: 3.9 | Impact: 3.4

Affected Packages2 packages

▶NVDdell/emc_powerscale_onefs9.1.0.0 — 9.1.0.25+2
▶CVEListV5dell/powerscale_onefs9.0.0.x — 9.4.0.x

🔴Vulnerability Details

2
GHSA
GHSA-2fp9-fvcr-fj52: Dell PowerScale OneFS 9↗2023-02-01
▶
CVEList
CVE-2022-45101: Dell PowerScale OneFS 9↗2023-02-01
▶
CVE-2022-45101 (CRITICAL CVSS 9.8) | Dell PowerScale OneFS 9.0.0.x - 9.4 | cvebase.io