4.4 MediumCWE-327
CVE-2025-36591
Dell Elastic Cloud Storage (ECS) vulnerability
DellElastic Cloud Storage (ECS)
Status
- Not in CISA KEV
- Vendor fix available
Exploit probabilityEPSSchecked 25 Oct
0.1%probability of exploitation in the next 30 days
Higher than 0% of scored CVEs
SeverityCVSS
4.4Medium
Description NVD
Dell ECS versions 3.8.1.0 through 3.8.1.7, and Dell ObjectScale versions prior to 4.4.0.0, contains an Use of a Broken or Risky Cryptographic Algorithm vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information exposure.
Coverage 1 article · 1 outlet
- Dell Warns of Critical ObjectScale Flaw Enabling Remote Code ExecutionSecurityOnline · first in our coverage · mentions it in passing