CVE Vulnerabilities

CVE-2021-36308

Authentication Bypass Using an Alternate Path or Channel

Published: Nov 20, 2021 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu
root.io logo minimus.io logo echo.ai logo

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

NameVendorStart VersionEnd Version
Networking_os10Dell*10.4.3.8 (excluding)
Networking_os10Dell10.5.0.0 (including)10.5.0.10 (excluding)
Networking_os10Dell10.5.1.0 (including)10.5.1.10 (excluding)
Networking_os10Dell10.5.2.0 (including)10.5.2.8 (excluding)

Potential Mitigations

References