The vulnerability enables a high‑privileged local attacker to alter system or configuration settings, allowing bypass of protection mechanisms. Identified as CWE‑15, it indicates external control of system or configuration setting. If exploited, the integrity of the PowerScale cluster’s security controls could be compromised, potentially facilitating further unauthorized actions.

Dell PowerScale OneFS, versions 9.10.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1 are vulnerable. These versions run on Dell’s OneFS operating system and must be updated to mitigate the issue.

The CVSS score is 3.4, reflecting low overall severity. The EPSS score is below 1 percent, indicating a very low expected exploitation rate. The vulnerability is not listed in the CISA KEV catalog. Exploitation requires a local attacker with high privileges, who can then modify configuration settings to bypass protection mechanisms. While the attack vector is limited to local privileged access, the potential impact on system integrity makes patching a prudent measure.