PowerScale: OneFS: Microsoft Security Hardening for RPC Netlogon Compatibility

Résumé: For most versions of Windows Server (2008-2022), and update released on July 8 included code enhancements that addressed a vulnerability with Remote Procedure Call Netlogon (CVE-2025-49716). This update was already released in Windows Server 2025 earlier in February. ...

Cet article concerne Cet article ne concerne pas Cet article n’est associé à aucun produit spécifique. Toutes les versions du produit ne sont pas identifiées dans cet article.
Consulter d’autres ressources

Type d’article de sécurité

Security KB

Identifiant CVE

Windows Netlogon Denial of Service Vulnerability: https://www.cve.org/CVERecord?id=CVE-2025-49716

Résumé des problèmes

 

In the July 8, 2025 update for Windows Server 2008-2022, Microsoft released code enhancements to address a vulnerability with certain anonymous RPC Netlogon calls. This code enhancement was applied in the February 2025 update to Windows Server 2025. This update serves to prevent a denial of service by mitigating the uncontrolled consumption of resources over RPC Netlogon. OneFS is not impacted and functions as normal when it is applied.

 

 

Recommandations


OneFS by design does not use anonymous calls when communicating with an Active Directory domain controller. The cluster authenticates with the cluster machine account and password. During the DC election process, OneFS uses CLDAP ping to determine how reachable a DC is after receiving a list from AD in an SRV record. The security hardening that Microsoft has implemented in the July 8 Windows Server patches does not impact PowerScale OneFS. No further action is required for administrators to maintain cluster functionality with Active Directory when applying the patch.
 

Informations supplémentaires

Microsoft Vulnerability Page: https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2025-49716

Mention légale

Produits concernés

Isilon, PowerScale OneFS
Propriétés de l’article
Numéro d’article: 000345800
Type d’article: Security KB
Dernière modification: 05 août 2025
Version:  1
Trouvez des réponses à vos questions auprès d’autres utilisateurs Dell
Services de support
Vérifiez si votre appareil est couvert par les services de support.