Lucene search

[email protected]NVD:CVE-2021-21548

HistoryMar 17, 2023 - 6:15 a.m.

CVE-2021-21548

2023-03-1706:15:51

CWE-295

[email protected]

web.nvd.nist.gov

dell emc unisphere

powermax os

certificate validation

vulnerability

remote attacker

man-in-the-middle

crafted certificate

data in transit

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

0.001 Low

EPSS

Percentile

46.6%

JSON

Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim’s traffic to view or modify a victim’s data in transit.

Affected configurations

NVD

Node

dellemc_unisphere_for_powermaxRange<9.1.0.27

dellemc_unisphere_for_powermax_virtual_applianceRange<9.1.0.27

dellpowermax_osMatch5978

References

www.dell.com/support/kbdoc/en-uk/000189606/dsa-2021-134-dell-emc-unisphere-for-powermax-dell-emc-unisphere-for-powermax-virtual-appliance-dell-emc-solutions-enabler-virtual-appliance-and-dell-emc-powermax-embedded-management-security-update-for-multiple-third-party-component-vulnerabilities

7.4 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

0.001 Low

EPSS

Percentile

46.6%

JSON

Related for NVD:CVE-2021-21548

prion1 cvelist1 cve1