---
id: CVE-2025-36601
title: >-
  Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure
  of sensitive information to an unauthorized actor vulnerability
summary: >-
  Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure
  of sensitive information to an unauthorized actor vulnerability. An
  unauthenticated remote attacker could potentially exploit this vulnerability,
  leading to I…
severity: medium
cvss: 4
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:N/A:N'
cwe:
  - CWE-200
vendor: dell
product: powerscale_onefs
affected:
  - 'powerscale_onefs >= 9.8.0.0, < 9.10.1.3'
  - 'powerscale_onefs >= 9.5.0.0, < 9.5.1.4'
  - 'powerscale_onefs >= 9.6.0, < 9.7.1.10'
  - powerscale_onefs = 9.11.0.0
patched:
  - powerscale_onefs 9.7.1.10
published: '2025-09-25'
updated: '2026-10-11'
sourceUpdated: '2026-10-11T20:10:00.200'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-36601'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-us/000353080/dsa-2025-272-security-update-for-dell-powerscale-onefs-multiple-third-party-component-vulnerabilities
    label: security_alert@emc.com
tags:
  - nvd
epss: 0.00402
epssPercentile: 0.32485
ingestedAt: '2026-10-12T14:50:33.992Z'
---

## Overview

Dell PowerScale OneFS, versions 9.5.0.0 through 9.11.0.0, contains an exposure of sensitive information to an unauthorized actor vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability, leading to Information disclosure.

## Affected

- `powerscale_onefs >= 9.8.0.0, < 9.10.1.3`
- `powerscale_onefs >= 9.5.0.0, < 9.5.1.4`
- `powerscale_onefs >= 9.6.0, < 9.7.1.10`
- `powerscale_onefs = 9.11.0.0`

## Remediation

Upgrade past the affected range:

- `powerscale_onefs 9.7.1.10`