CVE-2022-22560

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline.

• CVE ID
• CVE-2022-22560

• Assigner
• security_alert@emc.com

• Vulnerability Status
• Analyzed

• Published Version
• 2022-04-12T18:15:08

• Last Modified Date
• 2022-04-20T14:55:41

• Version
• 2.0

• Vector String
• AV:L/AC:L/Au:N/C:N/I:N/A:C

• Access Vector
• LOCAL

• Access Compatibility
• LOW

• Authentication
• NONE

• Confidentiality Impact
• NONE

• Integrity Impact
• NONE

• Availability Impact
• COMPLETE

• Base Score
• 4.9

• Severity
• MEDIUM

• Exploitability Score
• 3.9

• Impact Score
• 6.9

• Version
• 3.1

• Vector String
• CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

• Attack Vector
• LOCAL

• Attack Compatibility
• LOW

• Privileges Required
• LOW

• User Interaction
• NONE

• Scope
• UNCHANGED

• Confidentiality Impact
• NONE

• Availability Impact
• HIGH

• Base Score
• 5.5

• Base Severity
• MEDIUM

• Exploitability Score
• 1.8

• Impact Score
• 3.6