PT-2025-39400 · Dell · Dell Powerscale Onefs

Published 2025-09-24 · Updated 2025-09-25 · CVE-2025-36601

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions 9.5.0.0 through 9.11.0.0

Description Dell PowerScale OneFS has an issue that could allow an unauthorized actor to access sensitive information. An unauthenticated remote attacker may be able to exploit this, resulting in information disclosure.

Recommendations Update Dell PowerScale OneFS to a version later than 9.11.0.0.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2025-14004

CVE-2025-36601

Affected Products

Dell Powerscale Onefs

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-36601 · Security Note
• https://dell.com/support/kbdoc/en-us/000353080/dsa-2025-272-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-36601 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14004 · Security Note
• https://t.me/CVEtracker/33335 · Telegram Post
• https://twitter.com/CVEnew/status/1971232402455269383 · Twitter Post
• https://t.me/cveNotify/136411 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1971353465654780216 · Twitter Post