← Database

CVE-2022-22560

HIGH CVSS: 7.1 Published: 2022-04-12 Modified: 2026-06-17

Description

Dell EMC PowerScale OneFS 8.1.x - 9.1.x contain hard coded credentials. This allows a local user with knowledge of the credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. The attacker can exploit this vulnerability to take the switch offline.

Affected Platforms

Dell Emc Powerscale Onefs

Weakness Type

CWE-798, CWE-798

References