PatchTheCVECVE-2025-43937: Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log fil
CVE-2025-43937 is a medium-severity flaw (CVSS 6.6) affecting powerscale onefs. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.
Why this priority
- No elevated risk signals yet
A fixed release or distro patch exists.
Risk facts
| CVSS score | 6.6 (Medium) |
| Attack vector | Local |
| Attack complexity | Low |
| Privileges needed | Low |
| User interaction | Required |
| EPSS exploit chance | 0.1% (top 97%) |
| CISA exploited list | No |
| Weakness | CWE-532 |
| Published | 2026-04-16 |
| Last modified | 2026-10-07 |
Last updated 2026-10-07 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2025-43937?
powerscale onefs: upgrade to 9.5.1.5, 9.7.1.10, 9.10.1.3, 9.12.0.0. Exact commands for each OS are on this page.
Is CVE-2025-43937 being exploited?
CVE-2025-43937 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2025-43937 affect?
CVE-2025-43937 affects powerscale onefs. Severity is medium (CVSS 6.6). Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an insertion of sensitive information into log file vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to the disclosu
How urgent is CVE-2025-43937?
Priority 24/100. No elevated risk signals yet.
Software pages
Related CVEs
- CVE-2026-32803 LOW 3.3 UPGRADE Dell PowerScale OneFS versions 9.5.0.0 through 9.5.1.6, 9.6.0.0 through 9.7.1.13, 9.8.0.0 through 9.10.1.5 and
- CVE-2026-40633 HIGH 7.8 UPGRADE Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, versions 9.11.0.0 through 9.13.0.2 contains an Insert
- CVE-2026-49501 MEDIUM 6.7 UPGRADE Dell PowerScale OneFS versions 9.5.0.0 through 9.10.1.7, and versions 9.11.0.0 through 9.13.0.2 contains an Im
- CVE-2025-43935 MEDIUM 4.4 UPGRADE Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper resource shutdown or release vulnerabi
- CVE-2025-43883 MEDIUM 4.1 UPGRADE Dell PowerScale OneFS, versions prior to 9.12.0.0, contains an improper check for unusual or exceptional condi