CVE-2025-26479

{"id": "CVE-2025-26479", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "[email protected]", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 3.1, "attackVector": "NETWORK", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 1.6}]}, "published": "2025-04-10T03:15:18.893", "references": [{"url": "https://www.dell.com/support/kbdoc/en-us/000300860/dsa-2025-119-security-update-for-dell-powerscale-onefs-for-multiple-security-vulnerabilities", "tags": ["Vendor Advisory"], "source": "[email protected]"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "[email protected]", "description": [{"lang": "en", "value": "CWE-787"}]}], "descriptions": [{"lang": "en", "value": "Dell PowerScale OneFS, versions 9.4.0.0 through 9.10.0.0, contains an out-of-bounds write vulnerability. An attacker could potentially exploit this vulnerability in NFS workflows, leading to data integrity issues."}, {"lang": "es", "value": " Dell PowerScale OneFS, versiones 9.4.0.0 a 9.10.0.0, contiene una vulnerabilidad de escritura fuera de los l\u00edmites. Un atacante podr\u00eda potencialmente explotar esta vulnerabilidad en los flujos de trabajo de NFS, lo que provocar\u00eda problemas de integridad de los datos."}], "lastModified": "2025-07-15T16:15:39.373", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:dell:powerscale_onefs:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F1096C1C-D255-480D-B361-E0AB8044B926", "versionEndExcluding": "9.10.1.1", "versionStartIncluding": "9.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "[email protected]"}