PT-2025-31851 · Dell · Dell Ecs+1

Published 2025-08-04 · Updated 2025-08-04 · CVE-2025-26476

Positive Technologies (AI Summary)

CVSS v3.1

8.4

High

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell ECS versions prior to 3.8.1.5 ObjectScale version 4.0.0.0

Description Dell ECS and ObjectScale contain a Use of Hard-coded Cryptographic Key issue. An unauthenticated attacker with local access could potentially gain Unauthorized access.

Recommendations Update Dell ECS to version 3.8.1.5 or later. Update ObjectScale to version 4.0.0.0 or later.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

CVE-2025-26476

Affected Products

Dell Ecs

Objectscale

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-26476 · Security Note
• https://dell.com/support/kbdoc/en-us/000339134/dsa-2025-154-security-update-for-dell-ecs-and-objectscale-use-of-hard-coded-ssh-cryptographic-key-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-26476 · Vendor Advisory
• https://t.me/CVEtracker/29116 · Telegram Post
• https://twitter.com/CVEnew/status/1952448991930597700 · Twitter Post