CVE-2022-22560

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS versions 8.1.x through 9.1.x

Description The issue concerns hard-coded credentials in the software, allowing a local user with knowledge of these credentials to login as the admin user to the backend ethernet switch of a PowerScale cluster. This can be exploited to take the switch offline.

Recommendations For versions 8.1.x through 9.1.x, consider changing the hardcoded credentials to unique, secure credentials to prevent unauthorized access to the backend ethernet switch. As a temporary workaround, restrict access to the switch to minimize the risk of exploitation.