Product:
ECS and ObjectScale
Summary
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.2.0.0 contain a Cleartext Transmission of Sensitive Information vulnerability in the Fabric Syslog. An unauthenticated attacker with remote access could potentially exploit this vulnerability to intercept and modify information in transit.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.5 | CVE-2026-22274 |
Exploitation
To exploit this vulnerability, an attacker must have remote access to the affected systems. By intercepting the cleartext transmission of sensitive information in the Fabric Syslog, the attacker can modify the data being transmitted, leading to potential data breaches or unauthorized access to sensitive information.
Affected Products
- Dell ECS versions 3.8.1.0 through 3.8.1.7: Vulnerable to cleartext transmission of sensitive information.
- Dell ObjectScale versions prior to 4.2.0.0: Also affected by the same vulnerability in the Fabric Syslog.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to the latest versions of Dell ECS and ObjectScale that address this issue. Additionally, implementing secure transmission protocols can help protect sensitive information from being intercepted.