What is CVE-2022-45095?

CVE-2022-45095 is a medium-severity vulnerability in Dell Emc Powerscale Onefs, classified under Command Injection. CVSS score: 6.7/10. Published 2023-02-01.

How severe is CVE-2022-45095?

Medium severity. CVSS v3 base score is 6.7 out of 10.

RCE in Dell Emc Powerscale Onefs

CVE-2022-45095

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, information disclosure, and data deletion.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.006 (46.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell Emc_powerscale_onefs
Dell Powerscale Onefs — versions 8.2.x

Weakness classification (CWE)

CWE-77 — Command Injection

References

security_alert@emc.com (vendor-advisory, Vendor Advisory)

Frequently asked questions

What is CVE-2022-45095?: CVE-2022-45095 is a medium-severity vulnerability in Dell Emc Powerscale Onefs, classified under Command Injection. CVSS score: 6.7/10. Published 2023-02-01.
How severe is CVE-2022-45095?: Medium severity. CVSS v3 base score is 6.7 out of 10.