Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an uncontrolled search path element vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service, elevation of privileges, and information disclosure.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2026-22270 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and local access can manipulate the search path element to execute arbitrary code or commands. This could result in unauthorized access to sensitive information, denial of service, or escalation of privileges within the affected system.
Affected Products
- PowerScale OneFS versions prior to 9.10.1.6
- PowerScale OneFS versions 9.11.0.0 through 9.12.0.1
Mitigation
To mitigate this vulnerability, users should upgrade to the latest version of Dell PowerScale OneFS that addresses this issue. Regularly applying security updates and patches is essential to protect against potential exploits.