CVE Vulnerabilities

CVE-2021-36308

Authentication Bypass Using an Alternate Path or Channel

Published: Nov 20, 2021 | Modified: Nov 21, 2024
CVSS 3.x
9.8
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C
RedHat/V2
RedHat/V3
Ubuntu

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.

Weakness

The product requires authentication, but the product has an alternate path or channel that does not require authentication.

Affected Software

Name Vendor Start Version End Version
Networking_os10 Dell * 10.4.3.8 (excluding)
Networking_os10 Dell 10.5.0.0 (including) 10.5.0.10 (excluding)
Networking_os10 Dell 10.5.1.0 (including) 10.5.1.10 (excluding)
Networking_os10 Dell 10.5.2.0 (including) 10.5.2.8 (excluding)

Potential Mitigations

References