« Volver al listado

CVE-2024-37132

Estado: ModificadaMedia (6.7)—

Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service and Elevation of privileges.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Dell — Powerscale Onefs

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2024-37132",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2024-37132",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-07-02T14:03:13.590133Z"
        }
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Secondary",
        "source": "security_alert@emc.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      },
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 6.7,
          "attackVector": "LOCAL",
          "baseSeverity": "MEDIUM",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "HIGH",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 0.8
      }
    ]
  },
  "affected": [
    {
      "source": "security_alert@emc.com",
      "affectedData": [
        {
          "vendor": "Dell",
          "product": "PowerScale OneFS",
          "versions": [
            {
              "status": "affected",
              "version": "8.2.2.x",
              "versionType": "semver",
              "lessThanOrEqual": "9.5.0.8"
            },
            {
              "status": "affected",
              "version": "8.2.2.x",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.0"
            },
            {
              "status": "affected",
              "version": "9.7.0.1",
              "versionType": "semver",
              "lessThanOrEqual": "9.7.0.2"
            },
            {
              "status": "affected",
              "version": "9.7.0.3",
              "versionType": "semver"
            },
            {
              "status": "affected",
              "version": "9.8.0.0"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:dell:powerscale_onefs:8.2.2:*:*:*:*:*:*:*"
          ],
          "vendor": "dell",
          "product": "powerscale_onefs",
          "versions": [
            {
              "status": "affected",
              "version": "8.2.2",
              "versionType": "custom",
              "lessThanOrEqual": "9.8.0.0"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2024-07-02T08:15:05.553",
  "references": [
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000226569/dsa-2024-255-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "security_alert@emc.com"
    },
    {
      "url": "https://www.dell.com/support/kbdoc/en-us/000226569/dsa-2024-255-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security_alert@emc.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-266"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an incorrect privilege assignment vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Denial of service and Elevation of privileges."
    },
    {
      "lang": "es",
      "value": "Dell PowerScale OneFS versiones 8.2.2.x a 9.8.0.0 contienen una vulnerabilidad de asignación de privilegios incorrecta. Un atacante con privilegios elevados y acceso local podría explotar esta vulnerabilidad, lo que provocaría una denegación de servicio y una elevación de privilegios."
    }
  ],
  "lastModified": "2026-06-17T07:37:48.810",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:dell:powerscale_onefs:9.8.0.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "8B26C94F-8198-4439-BE83-F01232D2B1B0"
            },
            {
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "965A1F56-3D26-49B0-909A-786D819C9BA9",
              "versionEndExcluding": "9.5.1.0",
              "versionStartIncluding": "8.2.2"
            },
            {
              "criteria": "cpe:2.3:o:dell:powerscale_onefs:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5EF81235-CB35-43A4-A1F3-3ADE921BCDB4",
              "versionEndExcluding": "9.7.1.0",
              "versionStartIncluding": "9.6.0"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "security_alert@emc.com"
}