WID-SEC-W-2024-1497

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Dell PowerScale: Mehrere Schwachstellen

view advisory published 2024-07-01

Ein lokaler oder entfernter anonymer Angreifer kann mehrere Schwachstellen in Dell PowerScale ausnutzen, um seine Privilegien zu erweitern, einen Denial-of-Service-Zustand zu verursachen, Sicherheitsmaßnahmen zu umgehen oder vertrauliche Informationen offenzulegen.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2024-37134USmedium6.7—
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulne…
CVE-2024-37133USmedium6.7—
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulne…
CVE-2024-37132USmedium6.7—
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker with local access could potentially explo…
CVE-2024-37126USmedium6.7—
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulne…
CVE-2024-32854USmedium6.7—
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privilege attacker could potentially exploit this vulner…
CVE-2024-32853UShigh7.8—
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. A local low privileged attacker could potentially exploit thi…
CVE-2024-32852UShigh7.5OT elevated—
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.0 contain use of a broken or risky cryptographic algorithm vulnerability. An unprivileged network malicious attacker could pote…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan