PT-2026-33350 · Dell · Powerscale Onefs

Published 2025-10-08 · Updated 2026-04-17 · CVE-2025-43937

Positive Technologies (AI Summary)

CVSS v3.1

6.6

Medium

Base vector

AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Dell PowerScale OneFS versions prior to 9.12.0.0

Description An issue exists where sensitive information is inserted into log files. A low privileged attacker with local access could exploit this to disclose certain user credentials, potentially allowing them to access the application with the privileges of the compromised account.

Recommendations Update to version 9.12.0.0.

Fix

Insertion into Log File

Weakness Enumeration

CWE-532

Related Identifiers

BDU:2026-06486

CVE-2025-43937

Affected Products

Powerscale Onefs

References · 5

• https://dell.com/support/kbdoc/en-us/000376214/dsa-2025-347-security-update-for-dell-powerscale-onefs-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43937 · Security Note
• https://bdu.fstec.ru/vul/2026-06486 · Security Note
• https://twitter.com/CVEnew/status/2045102661515510061 · Twitter Post
• https://twitter.com/VulmonFeeds/status/2044973845380001814 · Twitter Post