CVE-2022-22549

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2022-22549
Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.8 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:M/Au:N/C:P/I:P/A:P

Exploitability : 8.6 / Impact : 6.4

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000195815/dsa-2022-002-dell-emc-powerscale-onefs-security-update-for-multiple-vulnerabilities
Configurations

Configuration 1 (hide)

cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
History

07 Nov 2023, 03:43

Type Values Removed Values Added
Summary Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials. Dell PowerScale OneFS, 8.2.x-9.3.x, contains a Improper Certificate Validation. A unauthenticated remote attacker could potentially exploit this vulnerability, leading to a man-in-the-middle capture of administrative credentials.

10 Feb 2023, 11:15

Type Values Removed Values Added
References
  • {'url': 'https://www.dell.com/support/kbdoc/000195815', 'name': 'https://www.dell.com/support/kbdoc/000195815', 'tags': ['Patch', 'Vendor Advisory'], 'refsource': 'MISC'}
  • (MISC) https://www.dell.com/support/kbdoc/en-us/000195815/dsa-2022-002-dell-emc-powerscale-onefs-security-update-for-multiple-vulnerabilities -

20 Apr 2022, 14:46

Type Values Removed Values Added
First Time Dell
Dell emc Powerscale Onefs
CPE cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
CWE CWE-295
CVSS v2 : unknown
v3 : unknown 		v2 : 6.8
v3 : 8.1
References (MISC) https://www.dell.com/support/kbdoc/000195815 - (MISC) https://www.dell.com/support/kbdoc/000195815 - Patch, Vendor Advisory

12 Apr 2022, 18:52

Type Values Removed Values Added
New CVE
Information

Published : 2022-04-12 18:15

Updated : 2023-12-10 14:22

NVD link : CVE-2022-22549

Mitre link : CVE-2022-22549

CVE.ORG link : CVE-2022-22549

JSON object : View

Products Affected

dell

  • emc_powerscale_onefs
CWE
CWE-295

Improper Certificate Validation