Lucene search

DellCVELIST:CVE-2021-21548

HistoryMar 17, 2023 - 5:07 a.m.

CVE-2021-21548

2023-03-1705:07:42

CWE-295

dell

www.cve.org

dell emc

powermax

certificate validation

vulnerability

man-in-the-middle

attack

data interception

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%

JSON

Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim’s traffic to view or modify a victim’s data in transit.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Unisphere for PowerMax, Dell EMC Unisphere for PowerMax Virtual Appliance ,  PowerMax OS",
    "vendor": "Dell",
    "versions": [
      {
        "status": "affected",
        "version": "Versions before 9.1.0.27"
      },
      {
        "status": "affected",
        "version": "5978"
      }
    ]
  }
]

References

www.dell.com/support/kbdoc/en-uk/000189606/dsa-2021-134-dell-emc-unisphere-for-powermax-dell-emc-unisphere-for-powermax-virtual-appliance-dell-emc-solutions-enabler-virtual-appliance-and-dell-emc-powermax-embedded-management-security-update-for-multiple-third-party-component-vulnerabilities

7.4 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

7.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.6%

JSON

Related for CVELIST:CVE-2021-21548