CVE-2024-49602

Published: Dec 9, 2024Modified: Jun 17, 2026

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Dell PowerScale OneFS Versions 8.2.2.x through 9.8.0.x contain an improper resource unlocking vulnerability. A remote low privileged attacker could potentially exploit this vulnerability, leading to denial of service.

Affected (4)

Products: Dell: Powerscale Onefs

Dell

1 product

Powerscale Onefs

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Powerscale Onefs	Version 9.8.0.0
Dell Powerscale Onefs	8.2.2 ≤ version < 9.7.1.3
Dell Powerscale Onefs	9.4.0 ≤ version < 9.4.0.20
Dell Powerscale Onefs	9.5.0.0 ≤ version < 9.5.1.1

Related CWEs

CWE-667

Improper Locking

The product does not properly acquire or release a lock on a resource, leading to unexpected resource state changes and behaviors.

CWE-765

Multiple Unlocks of a Critical Resource

The product unlocks a critical resource more times than intended, leading to an unexpected state in the system.

References (1)

https://www.dell.com/support/kbdoc/en-in/000256645/dsa-2024-453-security-update-for-dell-powerscale-onefs-multiple-security-vulnerabilities

Source: security_alert@emc.com

Vendor Advisory

Timeline

No history available yet.