CVE-2024-32853 — Execution with Unnecessary Privileges in Dell Powerscale Onefs

CWE-250 — Execution with Unnecessary Privileges3 documents3 sources
Severity
7.8HIGHNVD
CNA4.4
EPSS
0.1%
top 74.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Powerscale Onefs
Timeline
PublishedJul 2

Description

Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A local low privileged attacker could potentially exploit this vulnerability, leading to escalation of privileges.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶NVDdell/powerscale_onefs8.2.2 — 9.4.0.18+2
▶CVEListV5dell/powerscale_onefs8.2.2.x — 9.5.0.8+2

🔴Vulnerability Details

2
CVEList
CVE-2024-32853: Dell PowerScale OneFS versions 8↗2024-07-02
▶
GHSA
GHSA-hr92-g84q-j4f7: Dell PowerScale OneFS versions 8↗2024-07-02
▶
CVE-2024-32853 — Execution with Unnecessary Privileges | cvebase