---
id: CVE-2025-43992
title: >-
  Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior
  to 4.3.0.0, contains an authentication bypass by assumed-immutable data
  vulnerability in Geo replication
summary: >-
  Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior
  to 4.3.0.0, contains an authentication bypass by assumed-immutable data
  vulnerability in Geo replication. An unauthenticated attacker with remote
  access could …
severity: medium
cvss: 5.6
cvssVector: 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L'
cwe:
  - CWE-302
vendor: dell
product: elastic_cloud_storage
affected:
  - 'elastic_cloud_storage >= 3.8.1.0, < 4.3.0.0'
  - objectscale < 4.3.0.0
patched:
  - elastic_cloud_storage 4.3.0.0
  - objectscale 4.3.0.0
published: '2026-05-11'
updated: '2026-10-14'
sourceUpdated: '2026-10-14T13:10:00.187'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-43992'
references:
  - url: >-
      https://www.dell.com/support/kbdoc/en-us/000462117/dsa-2026-047-security-update-for-dell-ecs-and-objectscale-multiple-vulnerabilities-1
    label: security_alert@emc.com
tags:
  - nvd
epss: 0.00235
epssPercentile: 0.13413
ingestedAt: '2026-10-14T13:30:58.492Z'
---

## Overview

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an authentication bypass by assumed-immutable data vulnerability in Geo replication. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to unauthorized access to data in transit.

## Affected

- `elastic_cloud_storage >= 3.8.1.0, < 4.3.0.0`
- `objectscale < 4.3.0.0`

## Remediation

Upgrade past the affected range:

- `elastic_cloud_storage 4.3.0.0`
- `objectscale 4.3.0.0`