6.5
CVE-2023-25942
- EPSS 0.23%
- Veröffentlicht 04.04.2023 11:15:07
- Zuletzt bearbeitet 21.11.2024 07:50:29
- Quelle security_alert@emc.com
- Teams Watchlist Login
- Unerledigt Login
Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Dell ≫ Emc Powerscale Onefs Version >= 9.1.0.0 <= 9.1.0.28
Dell ≫ Emc Powerscale Onefs Version >= 9.2.1.0 < 9.2.1.22
Dell ≫ Emc Powerscale Onefs Version >= 9.4.0.0 < 9.4.0.13
Dell ≫ Emc Powerscale Onefs Version9.5.0.0
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.23% | 0.454 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
| security_alert@emc.com | 6.5 | 2.8 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
|
CWE-664 Improper Control of a Resource Through its Lifetime
The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.