Dell PowerScale OneFS housing systems can have their system logs wrongly altered by an attacker with low‑privilege access to the adjacent network, due to an Incorrect Authorization flaw. This permits the attacker to modify log entries, which can undermine forensic analysis and conceal malicious activity, compromising data integrity in the logs.

The flaw affects Dell PowerScale OneFS versions 9.5.0.0 through 9.7.1.15, 9.8.0.0 through 9.13.1.0, and all releases before 9.15.0.0. Systems running any of those firmware builds are vulnerable.

The CVSS score of 3.5 reflects a low‑severity risk; the EPSS score is not available and the vulnerability is not listed in CISA's KEV catalog, indicating no known widespread exploitation. Based on the description, the attacker must have network access to the OneFS environment and only basic privileges, so the risk is limited to potential log tampering rather than full system compromise. Based on the description, the likely attack vector is an adjacent network connection, implying that exploitation is probable only from that local access.