NetSight
high7.1

CVE-2022-22560

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials.

Impact

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline.

Affected products

VendorProductAffected versions
DellEmc Powerscale Onefs
from 8.1.0 through 9.2.1.0

Weakness classification

References