CVE-2024-53298: Critical severity Dell PowerScale OneFS vulnerability
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read, modify, and delete arbitrary files. This vulnerability is considered critical as it can be leveraged to fully compromise the system. Dell recommends customers to upgrade at the earliest opportunity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-53298?
CVE-2024-53298 is considered a high-severity vulnerability due to the potential for unauthorized filesystem access by an unauthenticated remote attacker.
How do I fix CVE-2024-53298?
To mitigate CVE-2024-53298, upgrade Dell PowerScale OneFS to version 9.10.0.2 or later as advised by the security update from Dell.
What impact does CVE-2024-53298 have on Dell PowerScale OneFS?
CVE-2024-53298 allows an unauthenticated attacker to gain unauthorized access to the filesystem, potentially leading to data breaches or alteration.
Who is affected by CVE-2024-53298?
All users of Dell PowerScale OneFS versions 9.5.0.0 through 9.10.0.1 are affected by CVE-2024-53298.
Is CVE-2024-53298 actively exploited in the wild?
As of the latest updates, there have been indications that CVE-2024-53298 is being actively exploited by attackers.