Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0 contain an authentication bypass vulnerability in Geo replication. An unauthenticated attacker with remote access could exploit this vulnerability, potentially leading to unauthorized access to data in transit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.6 | CVE-2025-43992 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected systems. By leveraging the authentication bypass, the attacker can gain unauthorized access to sensitive data during the geo-replication process, which could compromise the integrity and confidentiality of the data being transmitted.
Affected Products
- ECS versions 3.8.1.0 to 3.8.1.7: These versions are vulnerable to an authentication bypass in Geo replication.
- ObjectScale versions prior to 4.3.0.0: These versions also contain the same vulnerability, allowing for potential unauthorized data access.
Mitigation
To mitigate this vulnerability, users should upgrade to the latest versions of Dell ECS and ObjectScale that are not affected by this issue. Regularly applying security updates and monitoring for unauthorized access attempts can also help protect against potential exploitation.