Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.2.0.0 contain a Cleartext Transmission of Sensitive Information vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to information exposure. This could allow sensitive data to be intercepted during transmission.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.5 | CVE-2026-22271 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected systems. By intercepting the network traffic, the attacker can capture sensitive information that is transmitted in cleartext. This requires a high level of attack complexity and user interaction, making it necessary for the attacker to be in a position to monitor the network traffic effectively.
Affected Products
- Dell ECS versions 3.8.1.0 through 3.8.1.7: Vulnerable to cleartext transmission of sensitive information.
- Dell ObjectScale versions prior to 4.2.0.0: Also susceptible to the same vulnerability regarding cleartext data transmission.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest versions of Dell ECS and ObjectScale that address this issue. Implementing secure transmission protocols such as TLS can also help protect sensitive information from being exposed during transmission.