Description
Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0, contains an improper neutralization of formula elements in a CSV File vulnerability in the UI. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Dell | ECS | < 4.3.0.0 or later | 4.3.0.0 or later |
| Dell | ObjectScale | < 4.3.0.0 or later | 4.3.0.0 or later |
Advisories 1
- WID-SEC-2026-1461 Dell ECS: Mehrere Schwachstellen BSI CERT-Bund (WID) · May 11, 2026