CVE-2024-51540 Integer overflow in ECS
An authenticated user can exploit an arithmetic overflow in retention handling to bypass policies and delete objects in Dell ECS.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-51540?
CVE-2024-51540 is a high-severity vulnerability in Dell ECS, published on 26 Dec 2024. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
Dell ECS, versions prior to 3.8.1.3 contains an arithmetic overflow vulnerability exists in retention period handling of ECS. An authenticated user with bucket or object-level access and the necessary privileges could potentially exploit this vulnerability to bypass retention policies and delete objects.
Weakness: CWE-190
Which versions are affected by CVE-2024-51540?
It affects 1 product.
Products include Dell Elastic Cloud Storage.
How do I fix CVE-2024-51540?
No fix has been published for CVE-2024-51540 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-51540 being exploited?
There is no known exploitation of CVE-2024-51540 in the wild and no public exploit code.
Other vulnerabilities in Dell ECS
- CVE-2026-40636 Hardcoded credentials in ECS
- CVE-2017-8021 EMC Elastic Cloud Storage (ECS) before 3.1 is affected by an undocumented account vulnerability that could potentially be leveraged by malic
- CVE-2026-22273 Hardcoded credentials in ObjectScale
- CVE-2025-26476 Hardcoded credentials in ECS
- CVE-2026-28261 Information disclosure in Elastic Cloud Storage
Sources
Also known as GHSA-m48c-2qvg-rh53.