CVE-2018-11052: Dell EMC ECS S3 Authentication Bypass Vulnerability

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2018-07-03 · updated 2026-06-17
Weakness: CWE-287

Description

Dell EMC ECS versions 3.2.0.0 and 3.2.0.1 contain an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to read and modify S3 objects by supplying specially crafted S3 requests.

Affected products

Dellemc Elastic Cloud Storage: 3.2.0.0, 3.2.0.1

References

http://seclists.org/fulldisclosure/2018/Jul/1
http://www.securityfocus.com/bid/104660
http://seclists.org/fulldisclosure/2018/Jul/1
http://www.securityfocus.com/bid/104660

Get alerted when CVE-2018-11052 or the next vulnerability affects your stack