Dell PowerScale InsightIQ contains a vulnerability in its account lockout mechanism that allows an unauthenticated attacker with remote access to trigger a denial of service by causing legitimate accounts to be locked out. This flaw, classified as CWE‑645, compromises availability by preventing authorized users from accessing the system when lockout thresholds are surpassed. The attack does not provide code execution or data disclosure, but it can render the service unusable until administrative intervention occurs.

Dell PowerScale InsightIQ versions 5.2.0 through 6.3.0 are affected. The issue exists across all deployments of these product releases.

The CVSS score of 5.3 indicates moderate severity. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. The likely attack vector is remote, unauthenticated access to the InsightIQ management interfaces. If exploited, the attacker can force legitimate sessions to become inaccessible, disrupting business operations.