CVE-2023-22574: Dell Emc Powerscale Onefs

High severity, CVSS 8.1. EPSS: 0.7% chance of exploitation in the next 30 days.

Dell PowerScale OneFS 9.0.0.x - 9.4.0.x contain an insertion of sensitive information into log file vulnerability in platform API of IPMI module. A low-privileged user with permission to read logs on the cluster could potentially exploit this vulnerability, leading to Information disclosure and denial of service.

Affected products

• Dell Emc Powerscale Onefs: from 9.1.0.0, before 9.1.0.27 (fixed in 9.1.0.27); from 9.2.1.0, before 9.2.1.20 (fixed in 9.2.1.20); from 9.4.0.0, before 9.4.0.11 (fixed in 9.4.0.11)

Published 2023-02-01. Last modified 2026-06-17.