CVE Vulnerabilities

CVE-2021-36339

Published: Jan 21, 2022 | Modified: Oct 27, 2022
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.

Affected Software

Name Vendor Start Version End Version
Solutions_enabler Dell * 9.1.0.18 (excluding)
Solutions_enabler Dell 9.2.0.0 (including) 9.2.3.0 (excluding)
Solutions_enabler_virtual_appliance Dell * 9.1.0.18 (excluding)
Solutions_enabler_virtual_appliance Dell 9.2.0.0 (including) 9.2.3.0 (excluding)
Unisphere_360 Dell * 9.1.0.29 (excluding)
Unisphere_360 Dell 9.2.0.0 (including) 9.2.3.3 (excluding)
Unisphere_for_powermax Dell * 9.1.0.31 (excluding)
Unisphere_for_powermax Dell 9.2.0.0 (including) 9.2.3.4 (excluding)
Unisphere_for_powermax_virtual_appliance Dell * 9.1.0.31 (excluding)
Unisphere_for_powermax_virtual_appliance Dell 9.2.0.0 (including) 9.2.3.4 (excluding)
Vasa Dell * 9.1.0.723 (excluding)
Vasa Dell 9.2.0.0 (including) 9.2.3.0 (excluding)
Powermax_os Dell 5978 (including) 5978 (including)

References