CVE-2024-53298

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-53298
Dell PowerScale OneFS, versions 9.5.0.0 through 9.10.0.1, contains a missing authorization vulnerability in the NFS export. An unauthenticated attacker with remote access could potentially exploit this vulnerability leading to unauthorized filesystem access. The attacker may be able to read, modify, and delete arbitrary files. This vulnerability is considered critical as it can be leveraged to fully compromise the system. Dell recommends customers to upgrade at the earliest opportunity.

9.8 /10

CVSS v3 : CRITICAL

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000326339/dsa-2025-208-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities
Configurations

No configuration.

History

23 Jun 2025, 20:16

Type Values Removed Values Added
Summary
  • (es) Dell PowerScale OneFS, versiones 9.5.0.0 a 9.10.0.1, presenta una vulnerabilidad de falta de autorización en la exportación de NFS. Un atacante no autenticado con acceso remoto podría explotar esta vulnerabilidad, lo que provocaría acceso no autorizado al sistema de archivos. El atacante podría leer, modificar y eliminar archivos arbitrarios. Esta vulnerabilidad se considera crítica, ya que puede utilizarse para comprometer completamente el sistema. Dell recomienda a los clientes actualizar a la versión anterior.

20 Jun 2025, 14:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-06-20 14:15

Updated : 2025-06-23 20:16

NVD link : CVE-2024-53298

Mitre link : CVE-2024-53298

CVE.ORG link : CVE-2024-53298

JSON object : View

Products Affected

No product.

CWE
CWE-862

Missing Authorization