Vulnerability Details CVE-2024-53298
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read, modify, and delete arbitrary files. This vulnerability is considered critical as it can be leveraged to fully compromise the system. Dell recommends customers to upgrade at the earliest opportunity.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 34.3%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2024-53298
-
cpe:2.3:a:dell:powerscale_onefs:9.5.0.0
-
cpe:2.3:a:dell:powerscale_onefs:9.5.0.5
-
cpe:2.3:a:dell:powerscale_onefs:9.5.0.6
-
cpe:2.3:a:dell:powerscale_onefs:9.5.0.7
-
cpe:2.3:a:dell:powerscale_onefs:9.5.0.8
-
cpe:2.3:a:dell:powerscale_onefs:9.5.1.0
-
cpe:2.3:a:dell:powerscale_onefs:9.5.1.1
-
cpe:2.3:a:dell:powerscale_onefs:9.6.0
-
cpe:2.3:a:dell:powerscale_onefs:9.6.1
-
cpe:2.3:a:dell:powerscale_onefs:9.7.0.0
-
cpe:2.3:a:dell:powerscale_onefs:9.7.0.1
-
cpe:2.3:a:dell:powerscale_onefs:9.7.0.2
-
cpe:2.3:a:dell:powerscale_onefs:9.7.0.3
-
cpe:2.3:a:dell:powerscale_onefs:9.7.1.0
-
cpe:2.3:a:dell:powerscale_onefs:9.7.1.2
-
cpe:2.3:a:dell:powerscale_onefs:9.7.1.3
-
cpe:2.3:a:dell:powerscale_onefs:9.8.0.0
-
cpe:2.3:a:dell:powerscale_onefs:9.8.0.1
-
cpe:2.3:a:dell:powerscale_onefs:9.8.0.2
-
cpe:2.3:a:dell:powerscale_onefs:9.9.0.0
-
cpe:2.3:a:dell:powerscale_onefs:9.9.0.1