Dell ECS Improper Input Validation Vulnerability Leading to Code Execution

A vulnerability allowing code execution through improper input validation has been identified in Dell ECS versions through 3.8.1.4. This issue can be exploited by a low-privileged attacker with remote access.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users are advised to upgrade to Dell ObjectScale version 4.0 or later. Those on ECS 3.8.1.x and ECS 3.8.0.x can upgrade directly to OBS 4.0. Customers on versions prior to ECS 3.8.x must first upgrade to ECS 3.8.x before transitioning to OBS 4.0.