CVE-2023-25942

Summary

Dell PowerScale OneFS versions 8.2.x-9.4.x contain an uncontrolled resource consumption vulnerability. A malicious network user with low privileges could potentially exploit this vulnerability in SMB, leading to a potential denial of service.

Affected Software

VendorProductVersion RangeStatus
DellPowerScale OneFS9.2.1.0 through 9.2.1.21 9.4.0.0 through 9.4.0.12 9.5.0.0affected
DellPowerScale OneFS9.1.0.0 through 9.1.0.28affected
DellPowerScale OneFSAny other versionaffected

Weaknesses

  • CWE-664: CWE-664: Improper Control of a Resource Through its Lifetime

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References