Skip to content
OpenAdvisories
High WID-SEC-2025-0725 6 CVEs

Dell PowerScale OneFS: Mehrere Schwachstellen

Published Apr 7, 2025 · Updated Apr 7, 2025 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Dell PowerScale ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Daten zu manipulieren, vertrauliche Informationen preiszugeben und erhöhte Berechtigungen zu erlangen.

Product

PowerScale ist eine NAS-Plattform, die für die Verwaltung großer Datenmengen in unternehmenskritischen Umgebungen optimiert ist.

Vulnerabilities 6

  • Critical 9.8

    Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. An unauthen…

  • High 7.0

    Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an incorrect authorization vulnerability. An unauthe…

  • Medium 6.5

    Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.1, contains an integer overflow or wraparound vulnerability. An …

  • Medium 5.3

    Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.0, contains an uncontrolled resource consumption vulnerability. …

  • Low 3.3

    Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an exposure of information through directory listing…

  • Low 3.1

    Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker co…

Revision history

  1. #1

    Initiale Fassung

References

  • DELL Security Update vom 2025-04-07
    https://www.dell.com/support/kbdoc/de-de/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities