CVE-2025-43724: Medium severity Dell PowerScale OneFS vulnerability
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an authorization bypass through user-controlled key vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability to gain unauthorized access to NFSv4 or SMB shares.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Dell PowerScale OneFSto a version that resolves this vulnerability.Fixed in 9.12.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43724?
CVE-2025-43724 has a high severity rating due to the potential for unauthorized access by privileged attackers.
How do I fix CVE-2025-43724?
To fix CVE-2025-43724, upgrade Dell PowerScale OneFS to version 9.12.0.0 or later.
What type of vulnerability is CVE-2025-43724?
CVE-2025-43724 is an authorization bypass vulnerability caused by user-controlled keys.
Who is affected by CVE-2025-43724?
CVE-2025-43724 affects Dell PowerScale OneFS versions prior to 9.12.0.0.
What can an attacker achieve by exploiting CVE-2025-43724?
By exploiting CVE-2025-43724, an attacker could gain unauthorized access to NFSv4 or SMB shares.