CVE-2025-43724CWE-639

CVE-2025-43724

Medium · published October 8, 2025

CVSS v3.1
4.4
EPSS
0%
Percentile
2.2
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00127 · 2.2th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-10-08T19:16Z
Affected products (4)
ProductVersionsFixed in
dell/powerscale_onefs≥ 9.8.0.0, < 9.10.1.39.10.1.3
dell/powerscale_onefs≥ 9.5.0.0, < 9.5.1.59.5.1.5
dell/powerscale_onefs≥ 9.6.0, < 9.7.1.109.7.1.10
dell/powerscale_onefs≥ 9.11.0.0, < 9.12.0.09.12.0.0
References (1)
https://www.dell.com/support/kbdoc/en-us/000376214/dsa-2025-347-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · [email protected]
EPSS history
Timeline
  • 08 OCT 14:45Z
    Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability
    cvelistv5