CVE-2022-45099

Dell PowerScale OneFS, versions 8.2.x-9.4.x, contain a weak encoding for a NDMP password. A malicious and privileged local attacker could potentially exploit this vulnerability, leading to a full system compromise

Score

CVSS 3.1 7.8 High

Status

Modified - security_alert@emc.com

Published

2023-02-01

Last modified

2025-03-26

Weaknesses

CWE-261, CWE-276

Affected products

• Emc Powerscale Onefs (Dell)
• Powerscale Onefs (Dell)

References

• https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vul…