Data indicates that the vulnerability involves execution with unnecessary privileges, allowing a local attacker who already holds high privileged access to elevate their rights further. This flaw aligns with CWE‑250, permitting the attacker to gain unauthorized administrative capabilities that can compromise system integrity or enable the execution of arbitrary commands on Dell PowerScale OneFS devices.

Affected product is Dell PowerScale OneFS. Versions lacking the fix include all releases prior to 9.10.1.6, and versions in the 9.11.0.0 through 9.12.0.1 range. These installations remain susceptible until updated to the patched firmware.

The CVSS score of 6.7 denotes a moderate severity, while an EPSS score under 1% suggests exploitation is unlikely but not impossible. The vulnerability is not listed as a known exploited vulnerability by CISA, and the attack requires local high privileged access, meaning it is not remotely exploitable. Nevertheless, local users with high privileges should obtain the patch promptly to prevent privilege escalation.