CVE-2025-43935CWE-404

CVE-2025-43935

Medium · published April 16, 2026

CVSS v3.1
4.4
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to denial of service.

The record
Technical detail
CVSS v3.1
4.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2026-04-16T23:16Z
Affected products (4)
ProductVersionsFixed in
dell/powerscale_onefs< 9.5.1.59.5.1.5
dell/powerscale_onefs≥ 9.6.0.0, < 9.7.1.109.7.1.10
dell/powerscale_onefs≥ 9.8.0.0, < 9.10.1.39.10.1.3
dell/powerscale_onefs≥ 9.11.0.0, < 9.12.0.09.12.0.0
References (1)
https://www.dell.com/support/kbdoc/en-us/000376214/dsa-2025-347-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · [email protected]
EPSS history
Timeline
  • 16 APR 17:59Z
    Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerability
    cvelistv5