Dell Elastic Cloud Storage and Dell ObjectScale versions 3.8.1.0 through 3.8.1.7, and older ObjectScale releases before 4.2.0.0, have a vulnerability that allows cleartext transmission of sensitive data in the Fabric Syslog component. The flaw can enable an attacker to intercept and modify information moving through the system, potentially exposing confidential logs or tampering with system events. The weakness corresponds to the “Cleartext Transmission of Sensitive Information” category, which undermines the confidentiality of log data.

Affected are Dell ECS from version 3.8.1.0 up to 3.8.1.7 inclusive and any Dell ObjectScale installation earlier than 4.2.0.0. Enterprise users running these components experience the risk if the Fabric Syslog feature is enabled in a non‑encrypted mode.

The CVSS score of 6.5 indicates moderate severity; the EPSS score of less than 1% shows a very low probability of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. However, the vulnerability can be accessed by an unauthenticated attacker who has remote network access to the Fabric Syslog interface, enabling them to intercept and potentially modify traffic in transit.