Dell PowerScale OneFS
CVE-2025-43724
MEDIUM
Vulnerability Assessment
| Weakness |
CWE
OWASP Top 10:2025
A01:2025 - Broken Access Control
ASVS 5.0
V8 - Authorization Object-level authorization, IDOR prevention
|
| Impact | This is a genuinely low-to-moderate priority issue despite the HIGH-sounding 'authorization bypass' label, and the multiple signals are consistent rather than conflicting. The CVSS 3.1 vector (AV:L/AC:L/PR:H/UI:N, base 4.4 MEDIUM) establishes that an attacker must already have LOCAL access AND HIGH privileges on the OneFS system before exploitation is even possible - these two prerequisites are the dominant risk-limiting factors. EPSS reinforces this: 0.13% probability at the 2nd percentile indicates essentially no observed or predicted exploitation interest. There is no CISA KEV listing and no public proof-of-concept, so exploitation status is 'no public exploit identified at time of analysis.' Impact is confined to confidentiality (C:H, I:N, A:N) - the flaw (CWE-639, IDOR via user-controlled key) lets an already-privileged local actor read NFSv4/SMB shares they should not reach, but cannot modify data or affect availability. No signals are in tension: a privileged-local, confidentiality-only flaw with negligible EPSS and no KEV/POC is a patch-on-normal-cycle item, not an emergency. The main thing to verify independently is the fix version (9.12.0.0), which comes solely from the Dell advisory. |
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Oct 08, 2026
Authorization bypass in Dell PowerScale OneFS versions prior to 9.12.0.0 allows a high-privileged local attacker to bypass access controls and gain unauthorized access to NFSv4 or SMB shares, resulting in high confidentiality impact. The vulnerability requires local access and high privileges (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) and is assessed as low-to-moderate risk due to the low EPSS score (0.13%) and no public exploit or active exploitation identified.
RemediationAI
Upgrade to Dell PowerScale OneFS 9.12.0.0 or later, as the vulnerability is fixed in that release. Refer to the Dell advisory DSA-2025-347 for detailed instructions. If immediate upgrade is not possible, restrict local access to the OneFS cluster to trusted high-privileged administrators and monitor audit logs for unauthorized access attempts to NFSv4 or SMB shares. Note that the vulnerability requires high privileges and local access, so enforcing least privilege and multi-factor authentication for administrative access can reduce exposure. However, these are compensating controls and not a substitute for patching.
Affects your stack
Find out whether the stacks and servers you run are on an affected version.
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Technical ContextAI · show details
Dell PowerScale OneFS is a scale-out NAS operating system that supports NFSv4 and SMB file sharing protocols. The vulnerability is classified as CWE-639 (Authorization Bypass Through User-Controlled Key), which occurs when an application uses a user-controllable key to make authorization decisions without proper validation. In this case, an attacker with high privileges and local access could manipulate the user-controlled key to bypass access controls and gain unauthorized access to NFSv4 or SMB shares. The CVSS vector (AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) confirms that exploitation requires local access and high privileges, with a confidentiality-only impact. The affected CPEs include both application and OS entries for dell:powerscale_onefs, indicating the vulnerability resides in the core OneFS software.
Know when Powerscale Onefs gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
DescriptionNVD
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.
Threat Intelligence Overview
NVD
CVE.org
EPSS
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Authentication bypass attacks exploit flaws in the verification mechanisms that control access to systems and applications.
Affected Products (CPE)NVD
More in Powerscale Onefs
View allDell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability. Rated critic
CVE-2024-53298 is a critical missing authorization vulnerability in Dell PowerScale OneFS NFS export functionality that
Dell PowerScale OneFS, 9.5.0.x, contains a protection mechanism bypass vulnerability. Rated critical severity (CVSS 9.8)
Dell PowerScale OneFS, versions 8.2.x-9.2.x, contain broken or risky cryptographic algorithm. Rated critical severity (C
Dell PowerScale OneFS 8.2.x through 9.6.0.x contains a use of a broken or risky cryptographic algorithm vulnerability. R
Dell PowerScale OneFS, versions 8.2.2.x-9.5.0.x, contains an improper privilege management vulnerability. Rated high sev
Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific condit
Powerscale Onefs versions up to 9.13.0.0 is affected by improper restriction of excessive authentication attempts (CVSS
Dell PowerScale OneFS versions 8.2.x through 9.8.0.x contain a use of hard coded credentials vulnerability. Rated high s
Dell PowerScale OneFS versions 8.2.2.x through 9.6.0.x contains an improper control of a resource through its lifetime v
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.6 and 9.11.0.0 through 9.13.0.1 contain an incorrect privilege ass
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary privileges vulnerability. R
GitHub PoC
Exploit-DB