Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS contains an incorrect permission assignment for critical resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service. This affects multiple versions of the product, making it a significant concern for users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5 | CVE-2026-22280 |
Exploitation
To exploit this vulnerability, an attacker with low privileges must have local access to the affected system. By leveraging the incorrect permission assignment, the attacker can manipulate critical resources, potentially leading to a denial of service. User interaction is required for the attack to be successful.
Affected Products
- PowerScale OneFS versions 9.5.0.0 through 9.5.1.5
- PowerScale OneFS versions 9.6.0.0 through 9.7.1.10
- PowerScale OneFS versions 9.8.0.0 through 9.10.1.3
- PowerScale OneFS versions starting from 9.11.0.0 and prior to 9.13.0.0
Mitigation
To mitigate this vulnerability, users should update their PowerScale OneFS to the latest version that addresses the incorrect permission assignment. Regularly applying security updates and monitoring for any unusual activity can also help reduce the risk of exploitation.