CVE-2024-49603

Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x contain an incorrect specified argument vulnerability. A remote low privileged legitimate user could potentially exploit this vulnerability, leading to information disclosure.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://www.dell.com/support/kbdoc/en-in/000256645/dsa-2024-453-security-update-for-dell-powerscale-onefs-multiple-security-vulnerabilities	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:dell:powerscale_onefs::::::::
	cpe:2.3:a:dell:powerscale_onefs::::::::

History

09 Jan 2025, 15:46

Type	Values Removed	Values Added
CWE		NVD-CWE-Other
First Time		Dell powerscale Onefs Dell
References	~~() https://www.dell.com/support/kbdoc/en-in/000256645/dsa-2024-453-security-update-for-dell-powerscale-onefs-multiple-security-vulnerabilities -~~	() https://www.dell.com/support/kbdoc/en-in/000256645/dsa-2024-453-security-update-for-dell-powerscale-onefs-multiple-security-vulnerabilities - Vendor Advisory
CPE		cpe:2.3:a:dell:powerscale_onefs::::::::
Summary		(es) Las versiones 8.2.2.x a 9.9.0.x de Dell PowerScale OneFS contienen una vulnerabilidad de argumento especificado incorrecto. Un usuario legítimo remoto con pocos privilegios podría aprovechar esta vulnerabilidad, lo que provocaría la divulgación de información.

09 Dec 2024, 15:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-12-09 15:15

Updated : 2025-01-09 15:46

NVD link : CVE-2024-49603

Mitre link : CVE-2024-49603

CVE.ORG link : CVE-2024-49603

JSON object : View

Products Affected

dell

powerscale_onefs

CWE

CWE-687

Function Call With Incorrectly Specified Argument Value

NVD-CWE-Other

{"id": "CVE-2024-49603", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security_alert@emc.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}, {"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.5, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 3.6, "exploitabilityScore": 2.8}]}, "published": "2024-12-09T15:15:17.713", "references": [{"url": "https://www.dell.com/support/kbdoc/en-in/000256645/dsa-2024-453-security-update-for-dell-powerscale-onefs-multiple-security-vulnerabilities", "tags": ["Vendor Advisory"], "source": "security_alert@emc.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "security_alert@emc.com", "description": [{"lang": "en", "value": "CWE-687"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x contain an incorrect specified argument vulnerability. A remote low privileged legitimate user could potentially exploit this vulnerability, leading to information disclosure."}, {"lang": "es", "value": "Las versiones 8.2.2.x a 9.9.0.x de Dell PowerScale OneFS contienen una vulnerabilidad de argumento especificado incorrecto. Un usuario leg\u00edtimo remoto con pocos privilegios podr\u00eda aprovechar esta vulnerabilidad, lo que provocar\u00eda la divulgaci\u00f3n de informaci\u00f3n."}], "lastModified": "2025-01-09T15:46:25.277", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A822F7F-6A16-422D-A02A-A9946BCE236D", "versionEndExcluding": "9.7.1.3", "versionStartIncluding": "8.2.2"}, {"criteria": "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DDFFED2-4261-497B-8E12-A426828DEF85", "versionEndExcluding": "9.9.0.1", "versionStartIncluding": "9.8.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "security_alert@emc.com"}