CVE-2024-53298CWE-862

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export

Critical · published June 20, 2025

CVSS v3.1
9.8
EPSS
1%
Percentile
42.0
In the wild
Unconfirmed
What it is

🚨 A missing authorization check allows an unauthenticated attacker to waltz right into your file system like they own the place! 🔥 Think of it like a restaurant where anyone can walk into the kitchen without a staff pass, rummaging through ingredients, changing recipes, or even tossing out your favorite dish! 🍽️ This vulnerability is absolutely devastating! An attacker could read, modify, or delete any files on your Dell PowerScale OneFS system, potentially leading to complete system takeover. Imagine waking up to find your data altered or missing entirely — a nightmare scenario!

Put simply

Think of it like a restaurant where anyone can walk into the kitchen without a staff pass, rummaging through ingredients, changing recipes, or even tossing out your favorite dish! 🍽️ The flaw exists in versions 9.5.0.0 through 9.10.0.1 of Dell PowerScale OneFS, where the NFS export lacks proper authorization checks, allowing remote access to unauthorized users.

What to do

This vulnerability is absolutely devastating! An attacker could read, modify, or delete any files on your Dell PowerScale OneFS system, potentially leading to complete system takeover. Imagine waking up to find your data altered or missing entirely — a nightmare scenario! Upgrade your Dell PowerScale OneFS to the latest version immediately to close this security hole. Additionally, review your NFS export permissions to ensure they're properly configured and secure. Better safe than sorry! You've got this! By taking these steps, you're well on your way to locking down your system and earning your security hero badge! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00502 · 42.0th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-06-20T13:51Z
EPSS history
Timeline
  • 20 JUN 13:51Z
    Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export
    cvelistv5