6.0
Medium
CVE-2024-25952 Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability
Description
Dell PowerScale OneFS versions 8.2.2.x through 9.7.0.x contains an UNIX symbolic link (symlink) following vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to denial of service, information tampering.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| PowerScale OneFS 9.7 | 9.7.0.0 → 9.7.0.1 | No fix stated |
| PowerScale OneFS 9.6 | 9.6.1.0 → 9.7.0.0 | No fix stated |
| PowerScale OneFS 9.5 | 9.5.0.0 → 9.5.0.7 | No fix stated |
| PowerScale OneFS 9.4 | 9.4.0.0 → 9.4.0.16 | No fix stated |
| PowerScale OneFS 8.2 | 8.2.2 → 9.3.0.0 | No fix stated |
Other CVEs of PowerScale OneFS
The 175 CVEs of PowerScale OneFS →
CVE-2026-46460
Dell PowerScale OneFS, versions 9.5.0.0 through 9.7.1.15, versions 9.8.0.0 through 9.13.1.0, and versions prior to…
3.5
Low
CVE-2026-40635
Dell PowerScale OneFS versions 9.12.0.0 through 9.13.1.0 contain an Insecure Temporary File vulnerability
5.4
Medium
CVE-2026-70425
Dell PowerScale OneFS, Versions 9.5.0.0 through 9.7.1.0, Versions 9.8.0.0 through 9.10.1.0, and Versions 9.11.0.0…
6.7
Medium
CVE-2026-40633
Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insertion of…
7.8
High