CNNVD-202601-4135 Information

CNNVD ID

CNNVD-202601-4135

CVE-2026-22274

  • CNNVD Published: 2026-01-23

Description (Chinese)

Dell ECS是美国戴尔(Dell)公司的一款可扩展、易于管理且具有弹性的企业级对象存储解决方案。 Dell ECS 3.8.1.0版本至3.8.1.7版本和Dell ObjectScale 4.2.0.0之前版本存在安全漏洞,该漏洞源于Fabric Syslog明文传输敏感信息,可能导致拦截和修改传输中的信息。

Description (English)

Dell ECS is a scalable, manageable and flexible enterprise-level object storage solution for Dell in the United States. There is a security loophole in Dell ECS Version 3.8.1.0 to 3.8.1.7 and in Dell ObjectScale 4.2.0.0 prior to that, which stems from Fabric Syslog’s express transmission of sensitive information, which may lead to the interception and modification of information in the transmission.

Hazard Level

High

Vulnerability Type

其他

Affected Vendor

戴尔

Published

2026-01-23

Last Modified

2026-02-24

References

https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities

Patch

https://www.dell.com/support/kbdoc/en-us/000415880/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities

Share on: