CVE-2025-36601

Dell PowerScale OneFS versions prior to 9.13.0.0 contain an improper restriction of excessive authentication attempts vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access.

Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0 through 9.14.0.1, contain a command injection vulnerability. An admin privileged local attacker could potentially exploit this vulnerability, leading to elevation of privileges to root, impacting confidentiality, integrity, and availability.

Dell PowerScale OneFS versions 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, and versions prior to 9.15.0.0 contain an Incorrect Authorization vulnerability. A low privileged adjacent network attacker could exploit this, leading to unauthorized modification of system logs.

Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability. A low privileged remote attacker could potentially exploit this vulnerability, leading to denial of service and information tampering.

A vulnerability in Dell PowerScale OneFS allows insertion of sensitive information into log files. A low-privileged attacker with local access could exploit this flaw to disclose confidential data.

A vulnerability in Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7 and 9.11.0.0 through 9.13.0.2 is due to improper privilege management. It allows a local attacker with high privileges to escalate privileges.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could exploit this to disclose certain user credentials. The attacker may use the exposed credentials to access the application with the privileges of the compromised account.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an improper resource shutdown or release vulnerability. A high privileged attacker with local access could exploit this to cause a denial of service.

Dell PowerScale OneFS versions prior to 9.12.0.0 contain an improper check for unusual or exceptional conditions vulnerability. A high privileged attacker with local access could exploit this to cause a denial of service.

Incorrect privilege assignment in Dell PowerScale OneFS versions 9.5.0.0-9.10.1.6 and 9.11.0.0-9.13.0.1 allows a low-privileged local attacker to escalate privileges.