CVE-2021-36320
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
75.5%
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | x1008p_firmware | * | cpe:2.3:o:dell:x1008p_firmware:*:*:*:*:*:*:*:* |
| dell | x1008p | - | cpe:2.3:h:dell:x1008p:-:*:*:*:*:*:*:* |
| dell | x1018p_firmware | * | cpe:2.3:o:dell:x1018p_firmware:*:*:*:*:*:*:*:* |
| dell | x1018p | - | cpe:2.3:h:dell:x1018p:-:*:*:*:*:*:*:* |
| dell | x1026p_firmware | * | cpe:2.3:o:dell:x1026p_firmware:*:*:*:*:*:*:*:* |
| dell | x1026p | - | cpe:2.3:h:dell:x1026p:-:*:*:*:*:*:*:* |
| dell | x1052p_firmware | * | cpe:2.3:o:dell:x1052p_firmware:*:*:*:*:*:*:*:* |
| dell | x1052p | - | cpe:2.3:h:dell:x1052p:-:*:*:*:*:*:*:* |
| dell | x4012_firmware | * | cpe:2.3:o:dell:x4012_firmware:*:*:*:*:*:*:*:* |
| dell | x4012 | - | cpe:2.3:h:dell:x4012:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
75.5%