Dell PowerScale OneFS Default Password Vulnerability Allowing High Privilege Account Takeover

A vulnerability in Dell PowerScale OneFS has been identified, affecting versions 9.5.0.0 through 9.10.1.0. This vulnerability involves the use of default passwords, which could be exploited by an unauthenticated attacker with remote access. The exploitation of this vulnerability may lead to the takeover of a high privileged user account.

Impact

Exploitation of this vulnerability could result in the unauthorized takeover of a high privileged user account.

Remediation

Users can upgrade to PowerScale OneFS version 9.10.1.1 or later. For versions 9.5.0.0 through 9.10.0.0, the recommended upgrade is to version 9.10.1.1 or later. Instructions for downloading the update are available in the PowerScale OneFS Downloads Area.