CVE-2024-37132

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service and Elevation of privileges.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:9.8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*

History

03 Jul 2024, 18:01

Type Values Removed Values Added
First Time Dell
Dell powerscale Onefs
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 6.7
CWE CWE-266 NVD-CWE-noinfo
References () https://www.dell.com/support/kbdoc/en-us/000226569/dsa-2024-255-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000226569/dsa-2024-255-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities - Vendor Advisory
CPE cpe:2.3:a:dell:powerscale_onefs:9.8.0.0:*:*:*:*:*:*:*
cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*

02 Jul 2024, 08:15

Type Values Removed Values Added
New CVE

Information

Published : 2024-07-02 08:15

Updated : 2024-07-03 18:01


NVD link : CVE-2024-37132

Mitre link : CVE-2024-37132


JSON object : View

Products Affected

dell

  • powerscale_onefs