CVE-2022-22560: High severity dell emc isilon onefs vulnerability

Q: What is the vulnerability ID for this Dell EMC PowerScale OneFS vulnerability?

The vulnerability ID for this Dell EMC PowerScale OneFS vulnerability is CVE-2022-22560.

Q: What software versions are affected by this vulnerability?

Dell EMC PowerScale OneFS 8.1.x - 9.1.x are affected by this vulnerability.

Q: What is the severity level of this vulnerability?

This vulnerability has a severity level of high.

Q: How can a local user exploit this vulnerability?

A local user with knowledge of the hard coded credentials can login as the admin user to the backend Ethernet switch of a PowerScale cluster and take the switch offline.

Q: Is there a fix available for this vulnerability?

Yes, Dell has provided a fix for this vulnerability. Please refer to the reference link for more information.

Published Apr 12, 2022

Updated

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline.

Affected Software

1 affected component

Dell EMC PowerScale OneFS>=8.1.0<=9.2.1.0

Remediation

Patch Available

https://www.dell.com/support/kbdoc/000195815

Event History

Apr 12, 2022

CVE Published

via MITRE·05:50 PM

Data Sourced

via MITRE·05:50 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this Dell EMC PowerScale OneFS vulnerability?

The vulnerability ID for this Dell EMC PowerScale OneFS vulnerability is CVE-2022-22560.

What software versions are affected by this vulnerability?

Dell EMC PowerScale OneFS 8.1.x - 9.1.x are affected by this vulnerability.

What is the severity level of this vulnerability?