Vulnerabilities > Dell > Powerscale Onefs

DATE CVE VULNERABILITY TITLE RISK
2022-06-28 CVE-2022-31230 Use of a Broken or Risky Cryptographic Algorithm vulnerability in Dell Powerscale Onefs 9.0.0.0/9.1.0.0
Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm.
network
low complexity
dell CWE-327
critical
9.8
2022-06-01 CVE-2022-29098 Weak Password Requirements vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS versions 8.2.0.x through 9.3.0.x, contain a weak password requirement vulnerability.
network
low complexity
dell CWE-521
7.5
2021-12-21 CVE-2021-36350 Improper Authentication vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors.
network
low complexity
dell CWE-287
7.5
2021-08-10 CVE-2021-21567 Improper Privilege Management vulnerability in Dell Powerscale Onefs 9.0.0.0/9.1.0.0
Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability.
local
low complexity
dell CWE-269
7.8
2021-08-03 CVE-2021-21553 Unspecified vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode.
local
low complexity
dell
8.8
2021-08-03 CVE-2021-21565 Excessive Iteration vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability.
network
low complexity
dell CWE-834
5.3
2021-04-20 CVE-2021-21526 OS Command Injection vulnerability in Dell Powerscale Onefs
Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root.
local
low complexity
dell CWE-78
6.7