Dell PowerScale OneFS External Control of System or Configuration Setting Vulnerability

A vulnerability has been identified in Dell PowerScale OneFS versions 9.10.0.0 through 9.10.1.5 and 9.11.0.0 through 9.12.0.1. This vulnerability allows a high-privileged attacker with local access to bypass protection mechanisms by exploiting external control of system or configuration settings.

Impact

Exploitation of this vulnerability could lead to bypassing of protection mechanisms, potentially allowing for unauthorized actions or access.

Remediation

Users can upgrade to Dell PowerScale OneFS version 9.10.1.6 or later. For those using versions 9.11.0.0 through 9.12.0.1, the recommended upgrade is to version 9.13.0.0 or later. Instructions for downloading the update are available in the PowerScale OneFS Downloads Area.