Vulnerabilidades do Dell ECS
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Dell ECS: 5 registro(s), com versões afetadas e correções.
CVE-2022-31231
Alta · 7.5
CWE-284 22/05/2026
Improper Access Control em Dell Elastic Cloud Storage
Dell ECS, versions 3.5 and 3.6, contain an Improper Access Control in the Identity and Access Management (IAM) module. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to gaining read access to unauthorized data.
CVE-2026-40636
Alta · 7.8
CWE-798 11/05/2026
Use of Hard-coded Credentials em Dell Elastic Cloud Storage
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains a use of hard-coded credentials vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to filesystem access for attacker.
CVE-2026-35157
Crítica · 9.8
CWE-1236 11/05/2026
CSV Injection em Dell Elastic Cloud Storage
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
CVE-2026-26946
Média · 6.7
CWE-269 11/05/2026
Improper Privilege Management em Dell Elastic Cloud Storage
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper privilege management vulnerability in the OS. A high privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges.
CVE-2025-43992
Média · 5.6
CWE-302 11/05/2026
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0,...
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.