Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.2.0.0 contain a Use of Default Credentials vulnerability in the OS. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to elevation of privileges. This poses a significant risk to the integrity and confidentiality of the affected systems.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2026-22273 |
Exploitation
To exploit this vulnerability, an attacker with low privileges and remote access can utilize default credentials to gain unauthorized access to the system. Once inside, the attacker can escalate their privileges, potentially leading to full control over the affected systems. This exploitation can occur without user interaction, making it particularly dangerous.
Affected Products
- ECS versions 3.8.1.0 through 3.8.1.7: Vulnerable to default credentials allowing unauthorized access.
- ObjectScale versions prior to 4.2.0.0: Also affected by the same default credentials issue, enabling privilege escalation.
Mitigation
To mitigate this vulnerability, it is essential to update Dell ECS to a version beyond 3.8.1.7 and Dell ObjectScale to version 4.2.0.0 or later. Additionally, changing default credentials and implementing strong password policies can help prevent unauthorized access. Regular security audits and monitoring for unusual activity are also recommended.