CVE-2024-51540 - CVE House
Back to Database
Status published High CVE-2024-51540

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow...

Vulnerability Description

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-51540

Credits & Attribution

No credits recorded in the NVD database.

Affected Vendor

Affected Software

ECS
Vulnerable Versions:
Unknown

Timeline

Official Publish: December 26th, 2024
Last Modified: December 26th, 2024
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Weaknesses (CWE)