The vulnerability is due to the use of hard‑coded credentials in Dell ECS and ObjectScale, allowing an unauthenticated attacker who has local access to read or modify the filesystem. This flaw aligns with CWE‑798 and can be leveraged to gain unauthorized local access to system files.

Dell ECS versions 3.8.1.0 through 3.8.1.7 and Dell ObjectScale versions earlier than 4.3.0.0 are affected. These products run on Dell hardware in enterprise storage environments.

The CVSS score of 9.8 signals a critical risk level, while the EPSS score of less than 1% indicates a very low likelihood of exploitation at present. The vulnerability is not identified in the CISA KEV catalog. Exploitation requires only local presence on the machine; no remote authentication or network access is needed.