CVE-2025-43724: Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with…

PriorityP420medium4.4CVSS 3.1

AVLACLPRHUINSUCHINAN

EPSS

0.12%

2.1th percentile

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
dell	powerscale_onefs	>= 9.11.0.0 < 9.12.0.0	9.12.0.0
dell	powerscale_onefs	>= 9.5.0.0 < 9.5.1.5	9.5.1.5
dell	powerscale_onefs	>= 9.6.0 < 9.7.1.10	9.7.1.10
dell	powerscale_onefs	>= 9.8.0.0 < 9.10.1.3	9.10.1.3
dell	powerscale_onefs	>= N/A < 9.12.0.0	9.12.0.0

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.