Lucene search

[email protected]CVE-2021-36288

HistoryApr 08, 2022 - 8:15 p.m.

CVE-2021-36288

2022-04-0820:15:09

CWE-22

[email protected]

web.nvd.nist.gov

cve-2021-36288

dell

vnx2

file version 8.1.21.266

path traversal

vulnerability

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

Dell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/write restricted files

Affected configurations

NVD

Node

dellemc_unity_operating_environmentRange≤8.1.21.266

AND

dellvnx_vg10Match-

dellvnx_vg50Match-

dellvnx5200Match-

dellvnx5400Match-

dellvnx5600Match-

dellvnx5800Match-

dellvnx7600Match-

dellvnx8000Match-

dellvnxe1600Match-

CPENameOperatorVersion
dell:emc_unity_operating_environmentdell emc unity operating environmentle8.1.21.266

CPE	Name	Operator	Version
dell:emc_unity_operating_environment	dell emc unity operating environment	le	8.1.21.266

CNA Affected

[
  {
    "product": "VNX2",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "Version 8.1.21.303 (file) Version 5.33.021.5.303 (block)",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-us/000191155/dsa-2021-164-dell-vnx2-control-station-security-update-for-multiple-vulnerabilities

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

9.1 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

9.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

52.2%

JSON

Related for CVE-2021-36288

prion1 cvelist1 nvd1