Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to code execution, denial of service, elevation of privileges, and information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-21423 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and local access can manipulate the incorrect default permissions to execute arbitrary code. This could lead to unauthorized access to sensitive information, denial of service, or elevation of privileges within the affected system.
Affected Products
- PowerScale OneFS versions prior to 9.10.1.6
- PowerScale OneFS versions 9.11.0.0 through 9.12.0.1
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell PowerScale OneFS that addresses the incorrect default permissions. Regularly applying security updates and monitoring access permissions can also help reduce the risk of exploitation.