EUVD-2025-210918Severity by source
AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Remote unauthenticated auth bypass (AV:N/PR:N) with vendor-indicated non-trivial precondition (AC:H) granting full unauthorized access to the storage platform (C:H/I:H/A:H).
Primary rating from Vendor (dell).
CVSS VectorVendor: dell
Lifecycle Timeline
3DescriptionCVE.org
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
AnalysisAI
Improper authentication in Dell ObjectScale versions prior to 4.4.0.0 allows remote, unauthenticated attackers to bypass authentication and gain unauthorized access to the platform, with full impact to confidentiality, integrity, and availability (CVSS 3.1 8.1 High). The High attack complexity (AC:H) indicates exploitation requires satisfying a non-trivial precondition - such as a timing window or a specific system state in the authentication flow - rather than a single deterministic request, and no public exploit code has been identified at time of analysis. Only deployments running ObjectScale 4.4.0.0 and later are remediated, so older installations exposed on reachable management or S3 interfaces should be prioritized for upgrade.
Technical ContextAI
Dell ObjectScale is Dell's software-defined, Kubernetes-based object storage platform (the software successor to ECS), exposing S3-compatible data APIs and management interfaces. CVE-2025-43936 is rooted in CWE-287 (Improper Authentication), meaning the authentication routine fails to correctly verify the identity of a requester - potentially accepting a malformed, replayed, or state-dependent authentication request - in ObjectScale releases before 4.4.0.0. The CPE entry cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:* covers all vulnerable builds below the fixed 4.4.0.0 release without a granular version model. The CVSS 3.1 vector AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H assigns High attack complexity despite requiring no credentials, which points to a non-deterministic or race-condition-dependent authentication flaw rather than a straightforward bypass; an attacker can achieve complete compromise of the affected instance but must first arrange favorable conditions (for example, a specific authentication state, concurrent request timing, or a particular cluster configuration). ObjectScale is typically deployed on segmented internal networks, which limits reachability of the vulnerable interfaces.
RemediationAI
The primary remediation is to upgrade Dell ObjectScale to version 4.4.0.0 or later, as documented in Dell advisory DSA-2026-393 (https://www.dell.com/support/kbdoc/en-in/000505935/dsa-2026-393-security-update-for-dell-objectscale-multiple-vulnerabilities); this is a vendor-released patch and the only complete fix, and it is consistent with EUVD-2025-210918, which identifies 4.4.0.0 as the remediating version (Patch status: Patch available per vendor advisory). Until the upgrade can be performed, compensating controls should focus on the AC:H precondition and on reachability: restrict network access to ObjectScale management and S3 interfaces so only trusted administrative subnets or VPN clients can reach them (this shrinks the attack surface but can disrupt legitimate S3 clients and automation unless firewall or security-group rules are carefully scoped), and review authentication and access logs for anomalous or malformed authentication attempts that could indicate probing of the flawed node. Note that no public exploit code has been identified at time of analysis, so exploitation attempts are not expected to be widespread, but the High attack complexity does not mean the flaw is unexploitable; upgrading to 4.4.0.0 remains the recommended and complete fix.
More in Objectscale
View allUnauthenticated remote code execution in Dell ObjectScale affects all versions prior to 4.4.0.0, where deserialization o
Privilege escalation in Dell ECS 3.8.1.0-3.8.1.7 and ObjectScale prior to 4.2.0.0 stems from hardcoded default credentia
OS Command Injection in Dell ObjectScale versions prior to 4.3.0.1 enables a low-privileged local attacker to inject arb
OS command injection in Dell ObjectScale versions prior to 4.3.0.1 allows a local low-privileged attacker to escalate pr
Elastic Cloud Storage versions up to 3.8.1.7 is affected by cleartext transmission of sensitive information (CVSS 7.5).
OS command injection in Dell ObjectScale (versions prior to 4.3.0.1) enables a low-privileged local attacker to execute
Privilege escalation in Dell ObjectScale versions prior to 4.3.0.1 is enabled by an Uncontrolled Search Path Element (CW
Path traversal in Dell ObjectScale (versions prior to 4.3.0.1) enables a local low-privileged attacker to write to or co
Local privilege escalation in Dell ECS 3.8.1.0 through 3.8.1.7 and Dell ObjectScale prior to 4.4.0.0 allows an attacker
Elastic Cloud Storage versions up to 3.8.1.7 is affected by cleartext transmission of sensitive information (CVSS 6.5).
Dell ObjectScale versions prior to 4.3.0.1 expose sensitive information through insecure logging in the svc_tools compon
Local privilege escalation in Dell Elastic Cloud Storage (≤3.8.1.7) and ObjectScale (<4.1.0.3, =4.2.0.0) allows authenti
Same weakness CWE-287 – Improper Authentication
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today