CVE-2025-27690CWE-1393

Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability

Critical · published April 10, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
40.7
In the wild
Unconfirmed
What it is

🚨 Default passwords are still a thing? Yep! Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.0 are vulnerable, letting attackers saunter in like they own the place! 🔥 Think of it like leaving the front door to your castle wide open, with a sign that says 'Welcome! Feel free to take what you want'. An attacker with remote access can simply walk in and take control of a high-privileged user account without even breaking a sweat. This vulnerability could lead to absolute chaos! An attacker could easily take over a privileged user account, giving them the keys to sensitive data and settings. This could lead to data breaches, unauthorized changes, and a serious breach of trust – not to mention potential regulatory repercussions. Yikes!

Put simply

Think of it like leaving the front door to your castle wide open, with a sign that says 'Welcome! Feel free to take what you want'. An attacker with remote access can simply walk in and take control of a high-privileged user account without even breaking a sweat. In this case, the flaw involves the use of default passwords in Dell PowerScale OneFS, allowing unauthenticated attackers with remote access to exploit the system and gain unauthorized control over privileged accounts.

What to do

This vulnerability could lead to absolute chaos! An attacker could easily take over a privileged user account, giving them the keys to sensitive data and settings. This could lead to data breaches, unauthorized changes, and a serious breach of trust – not to mention potential regulatory repercussions. Yikes! To protect your systems, immediately change any default passwords in use and ensure strong, unique passwords for all accounts. Patch your PowerScale OneFS to the latest version as soon as possible to close this vulnerability. Regularly review your security practices to prevent similar scenarios. You've got this! With these steps, you’ll be a security hero, locking the door behind you! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00483 · 40.7th percentile
Weakness
CWE-1393 · Use of Default Password
Published
2025-04-10T02:04Z
EPSS history
Timeline
  • 10 APR 02:04Z
    Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.1.0, contains a use of default password vulnerability
    cvelistv5