DSA-2026-315: Security Update for Dell PowerScale OneFS Multiple Third-Party Component Vulnerabilities

摘要: Dell PowerScale OneFS remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

本文章適用於 本文章不適用於 本文無關於任何特定產品。 本文未識別所有產品版本。

影響

High

詳細資料

Third-Party Component CVEs More information
ConnectX BlueField CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
BIOS CVE-2023-6237, CVE-2024-4741, CVE-2025-31356 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.
iDRAC CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2024-28757, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 https://nvd.nist.gov/vuln/search This hyperlink is taking you to a website outside of Dell Technologies.

Dell Technologies 建議所有客戶不僅要參考 CVSS 基本分數,也要將可能會影響與特定安全漏洞相關之潛在嚴重性的所有相關暫時和環境分數納入考量。

受影響的產品與補救措施

CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale B100 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale F200 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale F210 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale F600 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale F710 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale F900 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale F910 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale P100 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale PA110 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVEs Addressed Product Software/Firmware Affected Versions Remediated Versions Link
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale B100 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale F200 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale F210 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale F600 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale F710 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale F900 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale F910 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2025-23299, CVE-2025-23350, CVE-2025-23351 PowerScale P100 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
CVE-2022-43680, CVE-2023-52425, CVE-2023-52426, CVE-2023-6237, CVE-2024-28757, CVE-2024-4741, CVE-2025-23299, CVE-2025-23350, CVE-2025-23351, CVE-2025-31356, CVE-2025-59375, CVE-2025-60876, CVE-2025-66382, CVE-2026-24515, CVE-2026-25210, CVE-2026-32776, CVE-2026-32777, CVE-2026-32778 PowerScale PA110 PowerScale Node Firmware Package Versions prior to 14.1 Version 14.1 or later PowerScale OneFS Downloads Area
  • We encourage all customers to upgrade to the remediated versions. If an upgrade is not feasible, customers should review the CVE details to determine potential risk to their environments.
  • To identify which nodes require upgrading, please refer to the firmware assessment report. For instructions on completing the assessment and report, please refer to the "Run a firmware assessment" section in PowerScale Node Firmware Package 14.1 Release Notes documented in Firmware - PowerScale Info Hub.

修訂歷史記錄

RevisionDateDescription
1.02026-08-18Initial Version

相關資訊

受影響的產品

PowerScale OneFS
文章屬性
文章編號: 000501312
文章類型: Dell Security Advisory
上次修改時間: 18 8月 2026
向其他 Dell 使用者尋求您問題的答案
支援服務
檢查您的裝置是否在支援服務的涵蓋範圍內。