CVE-2025-43724 — Authorization Bypass Through User-Controlled Key in Dell Powerscale Onefs

CWE-639 — Authorization Bypass Through User-Controlled Key3 documents3 sources
Severity
4.4MEDIUMNVD
EPSS
0.0%
top 97.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Dell Powerscale Onefs
Timeline
PublishedOct 8

Description

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:NExploitability: 0.8 | Impact: 3.6

Affected Packages2 packages

▶CVEListV5dell/powerscale_onefsN/A — 9.12.0.0
▶NVDdell/powerscale_onefs9.8.0.0 — 9.10.1.3+3

🔴Vulnerability Details

2
GHSA
GHSA-hhr3-p57f-p83g: Dell PowerScale OneFS, versions prior to 9↗2025-10-08
▶
CVEList
CVE-2025-43724: Dell PowerScale OneFS, versions prior to 9↗2025-10-08
▶
CVE-2025-43724 — Dell Powerscale Onefs vulnerability | cvebase