CVE-2023-25940: Dell Emc Powerscale Onefs

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

Dell PowerScale OneFS version 9.5.0.0 contains improper link resolution before file access vulnerability in isi_gather_info. A high privileged local attacker could potentially exploit this vulnerability, leading to system takeover and it breaks the compliance mode guarantees.

Affected products

• Dell Emc Powerscale Onefs: version 9.5.0.0 only

Published 2023-04-04. Last modified 2026-06-17.