PT-2025-20403 · Dell · Dell Powerscale Onefs

Published 2025-05-07 · Updated 2025-05-16 · CVE-2025-30101

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.8.0.0 through 9.10.1.0

Description The issue is a time-of-check time-of-use (TOCTOU) race condition vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to denial of service and information tampering.

Recommendations For versions 9.8.0.0 through 9.10.1.0, update to a version that contains a fix for this vulnerability to prevent exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Time Of Check To Time Of Use

Weakness Enumeration

CWE-367

Related Identifiers

BDU:2025-06537

CVE-2025-30101

Affected Products

Dell Powerscale Onefs

References · 9

• https://dell.com/support/kbdoc/en-us/000317419/dsa-2025-192-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30101 · Security Note
• https://bdu.fstec.ru/vul/2025-06537 · Security Note
• https://osv.dev/vulnerability/CVE-2025-30101 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1920590149563384026 · Twitter Post
• https://t.me/cvedetector/24849 · Telegram Post
• https://twitter.com/CVEnew/status/1920544489753751921 · Twitter Post
• https://t.me/cvenotify/122600 · Telegram Post
• https://t.me/cvetracker/23379 · Telegram Post