This vulnerability (CVE-2025-43992) in Dell ECS and Dell ObjectScale products arises from an authentication bypass caused by assumptions about immutable data within the Geo replication component. Specifically, versions 3.8.1.0 through 3.8.1.7 of Dell ECS and versions prior to 4.3.0.0 of Dell ObjectScale are affected. The flaw allows an unauthenticated attacker with remote access to bypass authentication controls, potentially leading to unauthorized access to data while it is in transit. The CVSS v3.1 base score is 5.6, reflecting medium severity with network attack vector, high attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability at a low level. No vendor advisory or patch information is currently available, and no known exploits have been reported.

Successful exploitation could allow an unauthenticated remote attacker to bypass authentication mechanisms in the Geo replication feature, potentially leading to unauthorized access to data in transit. The impact is rated as low on confidentiality, integrity, and availability, consistent with the CVSS score of 5.6 (medium severity). There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, organizations should consider limiting remote access to the Geo replication feature and monitor for unusual activity related to replication processes. Avoid exposing affected versions to untrusted networks where possible.