PT-2022-15530 · Dell · Dell Powerscale Onefs

Published 2022-04-12 · Updated 2022-04-20 · CVE-2022-22561

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 8.2.x through 9.3.0.x

Description The issue is related to an improper restriction of excessive authentication attempts, allowing an unauthenticated remote attacker to potentially exploit it and lead to compromised accounts.

Recommendations For versions 8.2.x through 9.3.0.x, consider restricting access to authentication mechanisms to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Restriction of Excessive Authentication Attempts

Weakness Enumeration

CWE-307

Related Identifiers

CVE-2022-22561

Affected Products

Dell Powerscale Onefs

References · 5

• https://osv.dev/vulnerability/CVE-2022-22561 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-22561 · Security Note
• https://dell.com/support/kbdoc/000195815 · Vendor Advisory
• https://t.me/cibsecurity/40679 · Telegram Post
• https://t.me/cvenotify/28783 · Telegram Post