PT-2024-3633 · Dell · Powerscale Onefs

Published 2024-05-07 · Updated 2025-01-09 · CVE-2024-25970

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:C/A:N

Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.x through 9.7.0.1

Description: The issue is related to insufficient input validation in the PowerScale OneFS operating system. This could allow a remote attacker with low privileges to potentially exploit the vulnerability, leading to a loss of integrity of protected information. A remote attack is possible, and the impact could be significant.

Recommendations: For Dell PowerScale OneFS versions 8.2.x through 9.7.0.1, patch immediately to fix the improper input validation vulnerability. Additionally, monitor for signs of compromise to ensure the security of the system.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-03955

CVE-2024-25970

Affected Products

Powerscale Onefs

References · 7

• https://dell.com/support/kbdoc/en-us/000224860/dsa-2024-163-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-03955 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-25970 · Security Note
• https://osv.dev/vulnerability/CVE-2024-25970 · Vendor Advisory
• https://vuldb.com/?id.264117 · Note
• https://twitter.com/oktsec/status/1810103901321941258 · Twitter Post
• https://t.me/cvenotify/106932 · Telegram Post