DSA-2025-166: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities
摘要: Dell PowerScale OneFS remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.
本文适用于
本文不适用于
本文并非针对某种特定的产品。
本文并非包含所有产品版本。
影响
Critical
详情
| Third-Party Component | CVEs | More information |
| Dell PowerEdge Server BIOS | CVE-2024-28047, CVE-2024-36293, CVE-2024-39279, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2024-28956, CVE-2024-31068, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-20064, CVE-2025-20105, CVE-2025-20028, CVE-2025-20027, CVE-2025-20073 | DSA-2025-041, DSA-2025-042, DSA-2025-156, DSA-2025-297, DSA-2024-381, DSA-2025-038 |
| Dell Remote Access Controller (iDRAC) | CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-26466, CVE-2024-48012, CVE-2025-22397, CVE-2026-79940 | DSA-2025-146, DSA-2025-156, DSA-2025-376, DSA-2026-374 |
受影响的产品和补救措施
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale F200 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale F600 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale F900 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale B100 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale P100 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-36293, CVE-2024-39279, CVE-2024-28047, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2025-26466, CVE-2024-31068, CVE-2024-48012, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-22397, CVE-2026-79940 | PowerScale F210 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-36293, CVE-2024-39279, CVE-2024-28047, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2025-26466, CVE-2024-31068, CVE-2024-48012, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-22397, CVE-2026-79940 | PowerScale F710 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-36293, CVE-2024-39279, CVE-2024-28047, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2025-26466, CVE-2024-31068, CVE-2024-48012, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-22397, CVE-2026-79940 | PowerScale F910 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2025-20064, CVE-2025-20105, CVE-2025-20028, CVE-2025-20027, CVE-2025-20073, CVE-2026-79940 | PowerScale PA110 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVEs Addressed | Product | Software/Firmware | Affected Versions | Remediated Versions | Link |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale F200 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale F600 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale F900 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale B100 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-28047, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2024-28956, CVE-2024-48012, CVE-2024-45332, CVE-2024-38796, CVE-2025-26466, CVE-2025-22397, CVE-2025-20064, CVE-2025-20028, CVE-2025-20027, CVE-2025-20105, CVE-2025-20073 | PowerScale P100 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-36293, CVE-2024-39279, CVE-2024-28047, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2025-26466, CVE-2024-31068, CVE-2024-48012, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-22397, CVE-2026-79940 | PowerScale F210 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-36293, CVE-2024-39279, CVE-2024-28047, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2025-26466, CVE-2024-31068, CVE-2024-48012, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-22397, CVE-2026-79940 | PowerScale F710 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2024-36293, CVE-2024-39279, CVE-2024-28047, CVE-2024-25571, CVE-2024-21859, CVE-2024-31155, CVE-2024-37020, CVE-2024-45332, CVE-2024-45490, CVE-2024-45491, CVE-2024-45492, CVE-2024-50602, CVE-2024-2961, CVE-2024-52533, CVE-2023-6780, CVE-2025-20053, CVE-2025-20613, CVE-2025-21090, CVE-2025-21096, CVE-2025-22853, CVE-2025-24305, CVE-2025-26466, CVE-2024-31068, CVE-2024-48012, CVE-2024-38796, CVE-2025-20109, CVE-2025-20044, CVE-2025-22397, CVE-2026-79940 | PowerScale F910 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
| CVE-2025-20064, CVE-2025-20105, CVE-2025-20028, CVE-2025-20027, CVE-2025-20073, CVE-2026-79940 | PowerScale PA110 | PowerScale Node Firmware Package | Versions prior to 13.1.3 | Version 13.1.3 or later | PowerScale OneFS Downloads Area |
Notes:
- We encourage all customers to upgrade to the remediated versions. If an upgrade is not feasible, customers should review the CVE details to determine potential risk to their environments.
- To identify which nodes require upgrading, please refer to the firmware assessment report. For instructions on completing the assessment and report, please refer to the "Run a firmware assessment" section in PowerScale Node Firmware Package 13.1.3 Release Notes documented in Firmware - PowerScale Info Hub.
- Due to the NFP installation issue with parallel upgrade, customers are advised not to perform parallel upgrades on version prior to 9.9.0.0.
解决方法和缓解措施
None
修订历史记录
| Revision | Date | Description |
| 1.0 | 2025-10-14 | Initial Release |
| 2.0 | 2026-02-25 | Major update to include CVE-2025-22397 |
| 3.0 | 2026-04-28 | Major update to include CVE-2025-20064, CVE-2025-20105, CVE-2025-20028, CVE-2025-20027 and CVE-2025-20073 |
| 4.0 | 2026-08-31 | Added details for CVE-2026-79940 |
相关信息
法律免责声明
受影响的产品
PowerScale OneFS, PowerScale B100, PowerScale F200, PowerScale F210, PowerScale F600, PowerScale F710, PowerScale F900, PowerScale F910, PowerScale P100文章属性
文章编号: 000363693
文章类型: Dell Security Advisory
上次修改时间: 31 8月 2026
从其他戴尔用户那里查找问题的答案
支持服务
检查您的设备是否在支持服务涵盖的范围内。