Dell ECS and Dell ObjectScale contain an authentication bypass vulnerability (CWE-302) in their Geo replication component. This issue arises from the assumption that certain data remains immutable, which can be exploited by an unauthenticated remote attacker to bypass authentication controls. Affected versions include Dell ECS 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions prior to 4.3.0.0. The vulnerability allows unauthorized access to data in transit, potentially compromising confidentiality, integrity, and availability to a limited extent. The CVSS 3.1 base score is 5.6, reflecting network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. No patch or official remediation level has been published by Dell as of the data provided.

An unauthenticated remote attacker could exploit this vulnerability to bypass authentication in the Geo replication feature, leading to unauthorized access to data being transmitted. This could result in limited confidentiality, integrity, and availability impacts on the affected systems. There are no reports of active exploitation in the wild. The impact is rated medium severity based on the CVSS score of 5.6.

Patch status is not yet confirmed — check the Dell vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, organizations should monitor Dell's security advisories for updates. Until a patch is available, consider restricting remote access to the Geo replication feature and applying network-level controls to limit exposure. Avoid relying on assumed-immutable data for security decisions in affected versions.