Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an execution with unnecessary privileges vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-21421 |
Exploitation
To exploit this vulnerability, an attacker with local access must leverage their high privileges to execute malicious code that can elevate their privileges further. This could allow the attacker to gain unauthorized access to sensitive data or system functions that are normally restricted.
Affected Products
- PowerScale OneFS versions prior to 9.10.1.6
- PowerScale OneFS versions 9.11.0.0 through 9.12.0.1
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell PowerScale OneFS that is not affected by this issue. Regularly applying security updates and patches is essential to protect against potential exploits.