CVE-2025-43992: Medium severity Dell Dell ECS vulnerability
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-43992?
CVE-2025-43992 has been classified as a high-severity vulnerability due to its potential for unauthorized access and exploitation.
How do I fix CVE-2025-43992?
To mitigate CVE-2025-43992, it is recommended to update Dell ECS to version 3.8.1.8 or later and Dell ObjectScale to version 4.3.0.0 or later.
Who is affected by CVE-2025-43992?
CVE-2025-43992 affects Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0.
What type of vulnerability is CVE-2025-43992?
CVE-2025-43992 is an authentication bypass vulnerability associated with geo replication in affected software.
Can an attacker exploit CVE-2025-43992 remotely?
Yes, an unauthenticated attacker with remote access can exploit CVE-2025-43992 to gain unauthorized access.