Dell ECS and ObjectScale Use of Default Credentials Vulnerability Allowing Privilege Escalation

A vulnerability allowing the use of default credentials has been identified in Dell ECS versions 3.8.1.0 through 3.8.1.7, and in Dell ObjectScale versions prior to 4.2.0.0. This vulnerability could be exploited by a low-privileged attacker with remote access, potentially leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized access and elevated privileges on the affected system.

Remediation

Customers using Dell ECS or ObjectScale can change default credentials by following the password change procedure outlined in the Dell ObjectScale 4.2.0.0 Security Configuration Guide. Those on ECS should upgrade to version 4.2.0.0 or later.