PT-2026-39582 · Dell · Ecs+1

Published 2026-05-11 · Updated 2026-05-16 · CVE-2025-43992

Positive Technologies (AI Summary)

CVSS v3.1

5.6

Medium

Base vector

AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Dell ECS versions 3.8.1.0 through 3.8.1.7 Dell ObjectScale versions prior to 4.3.0.0

Description An authentication bypass exists in Geo replication due to assumed-immutable data. A remote unauthenticated attacker could exploit this issue to gain unauthorized access to data in transit.

Recommendations Update Dell ECS to a version later than 3.8.1.7. Update Dell ObjectScale to version 4.3.0.0 or later.

Fix

Weakness Enumeration

CWE-302

Related Identifiers

CVE-2025-43992

Affected Products

Ecs

Objectscale

References · 7

• https://dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-43992 · Security Note
• https://t.me/CVEtracker/53361 · Telegram Post
• https://t.me/cveNotify/163722 · Telegram Post
• https://t.me/cveNotify/163018 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2053810632017773024 · Twitter Post
• https://twitter.com/CVEnew/status/2053954491947331888 · Twitter Post