CVE-2025-43992CWE-302

CVE-2025-43992

Medium · published May 11, 2026

CVSS v3.1
5.6
EPSS
0%
Percentile
13.7
In the wild
Unconfirmed
What it is

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.

The record
Technical detail
CVSS v3.1
5.6 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00235 · 13.7th percentile
Weakness
CWE-302 · Authentication Bypass by Assumed-Immutable Data
Published
2026-05-11T14:16Z
Affected products (2)
ProductVersionsFixed in
dell/elastic_cloud_storage≥ 3.8.1.0, < 4.3.0.04.3.0.0
dell/objectscale< 4.3.0.04.3.0.0
References (1)
https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1 · [email protected]
EPSS history
Timeline
  • 11 MAY 09:27Z
    Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data…
    cvelistv5