5.3
Medium
CVE-2024-25954 Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability
Description
Dell PowerScale OneFS, versions 9.5.0.x through 9.7.0.x, contain an insufficient session expiration vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to denial of service.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerScale OneFS 9.7 | 9.7.0.0 → 9.7.0.1 | No fix stated |
| PowerScale OneFS 9.6 | 9.6.1.0 → 9.7.0.0 | No fix stated |
| PowerScale OneFS 9.5 | 9.5.0.0 → 9.5.0.7 | No fix stated |
| powerscale_onefs 9.6 | 9.6.1.0 → < 9.7.0.2 | 9.7.0.2 |
| powerscale_onefs 9.5 | 9.5.0.0 → < 9.5.0.8 | 9.5.0.8 |
Other CVEs of PowerScale OneFS
The 175 CVEs of PowerScale OneFS →
CVE-2026-46460
Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to…
3.5
Low
CVE-2026-40635
Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability
5.4
Medium
CVE-2026-70425
Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0…
6.7
Medium
CVE-2026-40633
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of…
7.8
High