CVE-2024-51540CWE-190

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS

High · published December 26, 2024

CVSS v3.1
8.1
EPSS
0%
Percentile
31.7
In the wild
Unconfirmed
What it is

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00388 · 31.7th percentile
Weakness
CWE-190 · Integer Overflow or Wraparound
Published
2024-12-26T15:53Z
EPSS history
Timeline
  • 26 DEC 15:53Z
    Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS
    cvelistv5