PT-2026-3777 · Dell · Dell Powerscale Onefs

CVE-2026-22281

·

Publicado

2026-01-15

·

Atualizado

2026-01-23

CVSS v3.1

4.8

Média

VetorAV:A/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.5 Dell PowerScale OneFS versions 9.6.0.0 through 9.7.1.10 Dell PowerScale OneFS versions 9.8.0.0 through 9.10.1.3 Dell PowerScale OneFS versions prior to 9.13.0.0
Description Dell PowerScale OneFS contains a Time-of-check Time-of-use (TOCTOU) race condition. An attacker with adjacent network access and low privileges could potentially exploit this issue, resulting in a denial of service. The vulnerability is related to synchronization errors when using a shared resource.
Recommendations Update Dell PowerScale OneFS versions 9.5.x to a version later than 9.5.1.5. Update Dell PowerScale OneFS versions 9.6.x and 9.7.x to a version later than 9.7.1.10. Update Dell PowerScale OneFS versions 9.8.x and 9.10.x to a version later than 9.10.1.3. Update Dell PowerScale OneFS versions 9.11.x and 9.12.x to version 9.13.0.0 or later.

Correção

Time Of Check To Time Of Use

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2026-00646
CVE-2026-22281

Produtos afetados

Dell Powerscale Onefs