Lucene search
+L

10 matches found

CNVD
CNVD
•added 2021/11/28 12:00 a.m.•51 views

Dell Networking X-Series HOST Injection Vulnerability

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S. A HOST injection vulnerability exists in Dell Networking X-Series, which can be exploited by remote, unauthenticated attackers to poison web caches or trigger redirects by injecting arbitrary host header values...

6.1CVSS3.8AI score0.00858EPSS
SaveExploits0References1
OSV
OSV
•added 2021/11/20 2:15 a.m.•14 views

CVE-2021-36321

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service...

7.5CVSS5.8AI score0.01289EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/20 12:00 a.m.•3 views

CVE-2021-36320: Insufficient Entropy

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

9.8CVSS5.8AI score0.01192EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/20 12:00 a.m.•5 views

PT-2021-21222

Name of the Vulnerable Software and Affected Versions Dell Networking X-Series firmware versions prior to 3.0.1.8 Description The issue allows a remote unauthenticated attacker to potentially hijack a session and access the webserver by forging the session ID. This is due to an authentication...

9.8CVSS0.01192EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/20 12:00 a.m.•8 views

CVE-2021-36322: Improper Input Validation

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections...

6.1CVSS6.1AI score0.00858EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2021/11/20 12:00 a.m.•2 views

PT-2021-21223

Name of the Vulnerable Software and Affected Versions Dell Networking X-Series firmware versions prior to 3.0.1.8 Description The issue is related to improper input validation, which can be exploited by a remote unauthenticated attacker. This exploitation can occur when specially crafted data is...

7.5CVSS0.01289EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/11/20 12:00 a.m.•4 views

CVE-2021-36321: Improper Input Validation

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service...

7.5CVSS6AI score0.01289EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/11/20 12:00 a.m.•18 views

PT-2021-21224 · Dell · Dell Networking X-Series

Name of the Vulnerable Software and Affected Versions: Dell Networking X-Series firmware versions prior to 3.0.1.8 Description: The issue allows a remote unauthenticated attacker to potentially exploit the vulnerability by injecting arbitrary host header values to poison the web-cache or trigger...

6.1CVSS6.3AI score0.00858EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2021/11/20 12:00 a.m.•18 views

Dell Networking X-Series 注入漏洞

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S. A HOST injection vulnerability exists in Dell Networking X-Series, which can be exploited by remote, unauthenticated attackers to poison web caches or trigger redirects by injecting arbitrary host header values...

6.1CVSS5.8AI score0.00858EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/11/03 12:00 a.m.•13 views

CVE-2021-36322

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections...

6.1CVSS6.6AI score0.00858EPSS
SaveExploits0References2
Rows per page
Query Builder