PT-2025-16951 · Dell · Dell Ecs

Published 2024-03-26 · Updated 2025-04-19 · CVE-2025-26478

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell ECS versions 3.8.1.4 and prior

Description The issue is related to an Improper Certificate Validation, which could be exploited by an unauthenticated attacker with adjacent network access, potentially leading to information disclosure.

Recommendations For Dell ECS versions 3.8.1.4 and prior, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to sensitive information and network resources to minimize the risk of exploitation.

Fix

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

BDU:2025-05151

CVE-2025-26478

Affected Products

Dell Ecs

References · 7

• https://dell.com/support/kbdoc/en-in/000300068/dsa-2025-097-security-update-for-dell-objectscale-4-0-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-26478 · Security Note
• https://osv.dev/vulnerability/CVE-2025-26478 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05151 · Security Note
• https://t.me/cvetracker/21851 · Telegram Post
• https://t.me/cvedetector/23229 · Telegram Post
• https://twitter.com/CVEnew/status/1913455493311312226 · Twitter Post