What is the CVSS score of CVE-2025-43883?

CVE-2025-43883 has a CVSS 3.1 base score of 4.1 (Medium). CVSS vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H. EPSS exploitation probability: 0.0%.

Is there a patch available for CVE-2025-43883?

Yes, a patch is available for CVE-2025-43883. Update the affected software to the latest version immediately.

PowerScale OneFS CVE-2025-43883

EUVD-2025-209502 MEDIUM

Improper Check for Unusual or Exceptional Conditions (CWE-754)

2026-04-16 dell

GHSA-prf8-m597-vc2p

Dell Denial Of Service Powerscale Onefs

4.1

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

4.1 MEDIUM

AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

vuln.today AI

4.1 MEDIUM

Local access and high privileges required per description; high complexity to trigger; only availability disrupted with no confidentiality or integrity impact.

3.1 AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

4.0 AV:L/AC:H/AT:N/PR:H/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

Analysis Generated

Jul 24, 2026 - 07:29 vuln.today

Patch released

Apr 21, 2026 - 14:32 nvd

Patch available

Apr 16, 2026 - 19:16 EUVD

EUVD ID Assigned

Apr 16, 2026 - 18:00 euvd

EUVD-2025-209502

CVE Published

Apr 16, 2026 - 17:54 nvd

MEDIUM 4.1

DescriptionCVE.org

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.

AnalysisAI

Denial of service in Dell PowerScale OneFS (versions prior to 9.12.0.0) is triggered by a high-privileged local attacker exploiting improper handling of unusual or exceptional conditions (CWE-754). The impact is limited entirely to availability, with no confidentiality or integrity exposure. No public exploit has been identified, EPSS stands at 0.01% (2nd percentile), and CISA SSVC classifies exploitation status as none - indicating this is a low-urgency finding despite the availability impact.

Technical ContextAI

Dell PowerScale OneFS is an enterprise scale-out NAS operating system underpinning Isilon storage clusters. The flaw is classified as CWE-754 (Improper Check for Unusual or Exceptional Conditions), meaning the software fails to properly detect or handle edge-case or error conditions, which can be triggered to disrupt service availability. The CPE string cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:* confirms the vulnerability spans the entire OneFS application surface across affected release branches (9.5.x, 9.7.x, 9.10.x, and below 9.12.0.0). The CVSS vector AV:L/AC:H confirms exploitation requires local system access with high attack complexity, consistent with a condition-triggering flaw that requires precise environmental setup to reproduce.

RemediationAI

The primary remediation is to upgrade Dell PowerScale OneFS to a fixed release. Based on the EUVD version data and Dell advisory DSA-2025-347, branch-specific fixed versions are: 9.5.1.4 for the 9.5.x train, 9.7.1.10 for the 9.7.x train, 9.10.1.2 for the 9.10.x train, and 9.12.0.0 for the current release stream. Customers should consult the vendor advisory at https://www.dell.com/support/kbdoc/en-us/000376214/dsa-2025-347-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities for upgrade instructions specific to their cluster configuration. Because exploitation requires local high-privileged access (PR:H), a meaningful compensating control is rigorous enforcement of the principle of least privilege on OneFS nodes - auditing which accounts hold administrative roles and restricting local console or SSH access to only essential personnel. This reduces the attacker surface without requiring an immediate upgrade, though patching remains the definitive fix.