CVE-2023-25942

Published: Apr 4, 2023Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service.

Affected (4)

Products: Dell: Emc Powerscale Onefs

Dell

1 product

Emc Powerscale Onefs

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Powerscale Onefs	From 9.1.0.0 to 9.1.0.28
Dell Emc Powerscale Onefs	From 9.2.1.0 to 9.2.1.22
Dell Emc Powerscale Onefs	From 9.4.0.0 to 9.4.0.13
Dell Emc Powerscale Onefs	Version 9.5.0.0

Related CWEs

CWE-664

Improper Control of a Resource Through its Lifetime

The product does not maintain or incorrectly maintains control over a resource throughout its lifetime of creation, use, and release.

References (2)

https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/en-us/000211539/dell-emc-powerscale-onefs-security

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.