Product:
PowerScale OneFS
Summary
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains a vulnerability due to improper checks for unusual or exceptional conditions. A high privileged attacker with local access could exploit this vulnerability, potentially leading to a denial of service. This issue poses a medium severity risk due to its impact on availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.1 | CVE-2025-43883 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and local access to the affected system. By triggering the improper checks, the attacker can cause the system to enter an unstable state, resulting in a denial of service. This requires a specific set of conditions to be met, making the attack complex but feasible for those with the necessary access.
Affected Products
- PowerScale OneFS versions prior to 9.12.0.0: Vulnerable to denial of service due to improper condition checks.
Mitigation
To mitigate this vulnerability, users should upgrade to PowerScale OneFS version 9.12.0.0 or later. This update addresses the improper checks and enhances the overall security of the system. Regularly applying security updates and monitoring for unusual activity can further reduce the risk of exploitation.