CVE-2022-45100 : Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Va

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contains an Improper Certificate Validation vulnerability. An remote unauthenticated attacker could potentially exploit this vulnerability, leading to a full compromise of the system.

Published 2023-02-01 06:15:09

Updated 2023-02-08 14:57:27

Source Dell

View at NVD, CVE.org

Products affected by CVE-2022-45100

Dell » Emc Powerscale Onefs
Versions from including (>=) 9.1.0.0 and before (<) 9.1.0.25
cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
Matching versions
Dell » Emc Powerscale Onefs
Versions from including (>=) 9.4.0.0 and before (<) 9.4.0.9
cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
Matching versions
Dell » Emc Powerscale Onefs
Versions from including (>=) 9.3.0.0 and before (<) 9.3.0.7
cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
Matching versions
Dell » Emc Powerscale Onefs
Versions from including (>=) 9.2.1.0 and before (<) 9.2.1.18
cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2022-45100

EPSS FAQ

0.45%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 61 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-45100

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H	3.9	5.9	NIST
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High
8.1	HIGH	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H	2.2	5.9	Dell
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: High Availability: High

CWE ids for CVE-2022-45100

CWE-295 Improper Certificate Validation

The product does not validate, or incorrectly validates, a certificate.
Assigned by:
- nvd@nist.gov (Primary)
- security_alert@emc.com (Secondary)

References for CVE-2022-45100

https://www.dell.com/support/kbdoc/en-us/000206357/dell-emc-powerscale-onefs-security-updates-for-multiple-security-vulnerabilities

Access Denied
Vendor Advisory

CVEs referencing this url

Jump to

Vulnerability Details : CVE-2022-45100

Products affected by CVE-2022-45100

Exploit prediction scoring system (EPSS) score for CVE-2022-45100

CVSS scores for CVE-2022-45100

CWE ids for CVE-2022-45100

References for CVE-2022-45100