description:
Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service.
problem types: CWE-664: Improper Control of a Resource Through its Lifetime
affected:
{
defaultStatus: unaffected
product: PowerScale OneFS
vendor: Dell
versions:
status: affected, version: 9.2.1.0 through 9.2.1.21 9.4.0.0 through 9.4.0.12 9.5.0.0
status: affected, version: 9.1.0.0 through 9.1.0.28
status: affected, version: Any other version
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 6.5
baseSeverity: MEDIUM
confidentialityImpact: NONE
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL