CVE-2024-51540

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-190

Affected software

Vendor	Product	Versions
Dell	ECS	>= N/A, < 3.8.1.3

References

https://www.dell.com/support/kbdoc/en-us/000256642/dsa-2024-483-security-update-for-dell-ecs-multiple-vulnerabilitiesVendor Advisory

Timeline

Published: Dec 26, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-515417.5Local File Inclusion vulnerabilities allow access to sensitive system information. Affected products: ABB ASPECT - Enterprise v3.08.02; CVE-2024-515428.2Configuration Download vulnerabilities allow access to dependency configuration information. Affected products: ABB ASPECT - Enterprise v CVE-2024-515437.5Information Disclosure vulnerabilities allow access to application configuration information. Affected products: ABB ASPECT - Enterprise CVE-2024-515448.2Service Control vulnerabilities allow access to service restart requests and vm configuration settings. Affected products: ABB ASPECT - E CVE-2024-515459.8Username Enumeration vulnerabilities allow access to application level username add, delete, modify and list functions. Affected products: CVE-2024-515467.5Credentials Disclosure vulnerabilities allow access to on board project back-up bundles. Affected products: ABB ASPECT - Enterprise v3.08 CVE-2024-515479.8Use of Hard-coded Credentials vulnerability in ABB ASPECT-Enterprise, ABB NEXUS Series, ABB MATRIX Series.This issue affects ASPECT-Enterpri CVE-2024-515488.8Dangerous File Upload vulnerabilities allow upload of malicious scripts. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Seri CVE-2024-515499.4Absolute File Traversal vulnerabilities allows access and modification of un-intended resources. Affected products: ABB ASPECT - Enterpr CVE-2024-51556.1The Inquiry cart WordPress plugin through 3.4.2 does not have CSRF check in some places, and is missing sanitisation as well as escaping, wh CVE-2024-515509.8Data Validation / Data Sanitization vulnerabilities in Linux allows unvalidated and unsanitized data to be injected in an Aspect device. A CVE-2024-5155110.0Default Credentail vulnerabilities in ASPECT on Linux allows access to the product using publicly available default credentials. Affected p