CVE-2024-51540
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Dec 26, 2024
Updated: Jan 21, 2025
CWE ID 190
Summary
CVE-2024-51540 is a newly disclosed vulnerability affecting Dell ECS (Elastic Cloud Storage) prior to version 3.8.1.3. The issue involves an arithmetic overflow in the retention period handling mechanism. An authenticated user with appropriate access and privileges can leverage this vulnerability to bypass retention policies and delete objects, posing a significant risk to data integrity and compliance. Organizations using Dell ECS are advised to upgrade to the latest version as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Dell Technologies