TI-2022-10097 Aliases CVE-2022-26852 GHSA-7mgv-qhc8-mrrg

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random…

MEDIUM 45CWE-337Published 2022-04-08 · Updated 2024-09-17

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Dell PowerScale OneFS, versions 8.2.x-9.3.x, contain a predictable seed in pseudo-random number generator. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to an account compromise.

Why it matters now

EPSS 0.01236 69th percentileScored 2026-11-07

Fix Fixed PowerScale OneFS (Dell): 8.2.x, 9.0.0.x, 9.1.0.x +3

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Dell	PowerScale OneFS	before 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x , 9.2.1.x, 9.3.0.x	8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x , 9.2.1.x, 9.3.0.x	Patch available	CNA

PowerScale OneFS VendorDell Affected before 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x , 9.2.1.x, 9.3.0.x Fixed in 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x , 9.2.1.x, 9.3.0.x Patch available CNA

CPE configurations NVD · 1

CPE	Versions	Role	Vendor
cpe:2.3:o:dell:emc_powerscale_onefs::::::::	8.2.0 – 9.3.0.0	Vulnerable	Dell

cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:* Versions 8.2.0 – 9.3.0.0 Vulnerable ·Dell

Remediation

Fix · CNA PowerScale OneFS (Dell) Fixed in 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x , 9.2.1.x, 9.3.0.x

Timeline

2026-10-02 Threatist record created from CVE-2022-26852
2026-10-03 Alias added: GHSA-7mgv-qhc8-mrrg

References

Advisory 1

https://www.dell.com/support/kbdoc/en-us/000197991/dell-emc-powerscale-onefs-security-update-for-multiple-component-vulnerabilities

TI-2022-22190 Improper privilege management in Dell PowerScale OneFS CVSS 3.1CRITICAL 9.8
TI-2022-06835 Missing brute-force protection in Dell PowerScale OneFS CVSS 3.1CRITICAL 9.8
TI-2021-04595 Improper authentication in Dell PowerScale OneFS CVSS 3.1CRITICAL 9.8
TI-2022-22189 Improper certificate validation in Dell PowerScale OneFS CVSS 3.1CRITICAL 9.8
TI-2022-15270 Insufficiently protected credentials in Dell PowerScale OneFS CVSS 3.1CRITICAL 9.8
TI-2022-10098 Broken or risky cryptographic algorithm in Dell PowerScale OneFS CVSS 3.1CRITICAL 9.8

See all 83 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences