CVE-2021-21502: Dell Emc Powerscale Onefs

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Dell PowerScale OneFS versions 8.1.0 – 9.1.0 contain a "use of SSH key past account expiration" vulnerability. A user on the network with the ISI_PRIV_AUTH_SSH RBAC privilege that has an expired account may potentially exploit this vulnerability, giving them access to the same things they had before account expiration. This may by a high privileged account and hence Dell recommends customers upgrade at the earliest opportunity.

Affected products

• Dell Emc Powerscale Onefs: version 8.1.0 only; version 8.1.1 only; version 8.1.2 only; version 8.2.0 only; version 8.2.1 only; version 8.2.2 only; …

Published 2021-02-09. Last modified 2026-06-17.