CVE-2022-45095: Dell Emc Powerscale Onefs

Medium severity, CVSS 6.7. EPSS: 0.6% chance of exploitation in the next 30 days.

Dell PowerScale OneFS, 8.2.x-9.4.x, contain a command injection vulnerability. An authenticated user having access local shell and having the privilege to gather logs from the cluster could potentially exploit this vulnerability, leading to execute arbitrary commands, denial of service, information disclosure, and data deletion.

Affected products

• Dell Emc Powerscale Onefs: from 9.1.0.0, before 9.1.0.25 (fixed in 9.1.0.25); from 9.2.1.0, before 9.2.1.18 (fixed in 9.2.1.18); from 9.4.0.0, before 9.4.0.9 (fixed in 9.4.0.9)

Published 2023-02-01. Last modified 2026-06-17.