PT-2021-11223 · Dell Emc · Dell Emc Powerscale Onefs

Published 2021-02-09 · Updated 2022-10-21 · CVE-2020-26195

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions: Dell EMC PowerScale OneFS versions 8.1.2 through 9.1.0

Description: The issue in Dell EMC PowerScale OneFS allows a remote unauthenticated attacker to potentially slow down the system by exploiting the OneFS SMB directory auto-create feature, which may erroneously create a directory for a user.

Recommendations: For versions 8.1.2 through 9.1.0, consider disabling the OneFS SMB directory auto-create feature as a temporary workaround to minimize the risk of exploitation.

Fix

Improper Handling of Exceptional Conditions

Weakness Enumeration

CWE-280

CWE-755

Related Identifiers

CVE-2020-26195

Affected Products

Dell Emc Powerscale Onefs

References · 3

• https://dell.com/support/kbdoc/en-us/000182873/dsa-2021-009-dell-powerscale-onefs-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-26195 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-26195 · Security Note