Impact
An improper check for unusual or exceptional conditions in Dell PowerScale OneFS allows a high‑privileged local attacker to trigger a denial of service when the condition is evaluated incorrectly. The flaw does not provide direct data disclosure or code execution, but it can stop the system or a service from operating, potentially affecting availability for the entire file system cluster if the attack is successful.
Affected Systems
Dell PowerScale OneFS versions earlier than 9.12.0.0 are susceptible. The vulnerability is present in the product when deployed on any platform that runs these affected releases and has not yet been upgraded.
Risk and Exploitability
The CVSS score is 4.1, placing the vulnerability in the low‑severity range. EPSS data is unavailable, so the likelihood of exploitation is unclear, and the vulnerability is not listed in CISA’s KEV catalog. The attack requires local access with high privileges, thus limiting the threat surface to administrators or compromised administrative accounts. While the impact is limited to service interruption, an attacker who can persist the denial could disrupt critical workflows.
OpenCVE Enrichment