8.1High
CVE-2025-43936
Description
Dell ObjectScale, versions prior to ObjectScale 4.4.0.0, contains an Improper Authentication vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Weakness (CWE):
CWE-287
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
Affected products and versions
| Vendor | Product | Versions | |
|---|---|---|---|
| Dell | ObjectScale | < 4.4.0.0 or later |
References and patches
- https://www.dell.com/support/kbdoc/en-in/000505935/dsa-2026-393-security-update-for-dell-objectscale-multiple… vendor-advisoryVendor Advisory
CPE matches (NVD) (1)
cpe:2.3:a:dell:objectscale:*:*:*:*:*:*:*:*< 4.4.0.0