Dell PowerScale OneFS Multiple Vulnerabilities, CVSS 6.6, Privilege Escalation

CERT-Bund published a security advisory detailing multiple vulnerabilities in Dell PowerScale OneFS, a NAS platform for enterprise data management. The vulnerabilities carry a CVSS Base Score of 6.6 and allow attackers to disclose information and escalate privileges. No remote attack vector is required. Three affected version ranges are identified: versions below 9.10.1.7, below 9.13.0.1, and below 9.13.0.2. Mitigation measures are available.

Organizations operating Dell PowerScale storage systems must assess their installations against the affected version ranges and apply patches or mitigations promptly. While no specific penalties are stated, unpatched systems remain vulnerable to exploitation that could compromise sensitive data and allow unauthorized privilege escalation.