PT-2021-14597

Name of the Vulnerable Software and Affected Versions Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 Description The issue concerns a plain-text password storage vulnerability that occurs when the Dell Upgrade Readiness Utility is run on the system. This vulnerability...

CVE-2021-21542: Improper Neutralization of Input During Web Page Generation

Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generati...

CVE-2021-21547: Cleartext Storage of Sensitive Information

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high...

CVE-2021-21539: Time-of-check Time-of-use (TOCTOU) Race Condition

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use TOCTOU race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC throu...

CVE-2021-21540: Stack-based Buffer Overflow

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to overwrite configuration information by injecting arbitrarily large payload...

PT-2021-14591

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.40.00.00 Description The issue allows a remote unauthenticated attacker to potentially exploit a DOM-based cross-site scripting vulnerability by tricking a victim application user into supplying malicious HT...

PT-2021-14593

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.40.00.00 Description The issue concerns stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could exploit these vulnerabilities to store malicious HTML or...

Dell iDRAC Multiple Vulnerabilities (DSA-2021-073)

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple vulnerabilities: - A Time-of-check Time-of-use TOCTOU race condition vulnerability. A remote authenticated attacker may potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is...

DELL EMC NetWorker 日志信息泄露漏洞

DELL EMC NetWorker is a suite of unified backup and recovery software from Dell DELL USA. The software provides backup and recovery, deduplication elimination, backup reporting, and other features. Dell NetWorker has a security vulnerability that can be exploited by an attacker to escalate his...

CVE-2021-21547

Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high...

CVE-2021-21542

Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generati...

CVE-2021-21539

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use TOCTOU race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC throu...

CVE-2021-21540

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to overwrite configuration information by injecting arbitrarily large payload...

Dell SRM and SMR Code Issue Vulnerabilities

Dell EMC Storage Resource Manager is an application from Dell, Inc. A comprehensive monitoring and reporting solution that helps IT visualize, analyze and optimize today's storage infrastructure while providing a management framework to support software-defined storage investments. A code issue...

Dell EMC Storage Resource Manager 代码问题漏洞

Dell EMC Storage Resource Manager is an application from Dell, Inc. A comprehensive monitoring and reporting solution that helps IT visualize, analyze and optimize today's storage infrastructure while providing a management framework to support software-defined storage investments. A code issue...

Dell OpenManage Server Administrator 9.4.0.0 File Read

Exploit Title: Dell OpenManage Server Administrator 9.4.0.0 - Arbitrary File Read Date: 4/27/2020 Exploit Author: Rhino Security Labs Version: :' exit This XML to imitate a Dell OMSA remote system comes from https://www.exploit-db.com/exploits/39909 Also check out...

The vulnerability of the software for system management in the One-to-one Dell EMC OpenManage Server Administrator mode, related to authentication procedures that allow a malicious actor to gain access to the administrator’s privileges on the system.

The vulnerability of the software for managing systems in the One-to-one Dell EMC OpenManage Server Administrator mode is related to deficiencies in the authentication process. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the administrator’s...

Dell EMC OpenManage Server Administrator Authentication Bypass Vulnerability

DELL Dell EMC OpenManage Server Administrator is a set of system management solutions from DELL, USA. The program supports online diagnostics, system operation detection, device management, etc. Microsoft Windows is a desktop operating system from Microsoft Corporation. The Dell EMC OpenManage...

Dell EMC OpenManage Server Administrator Path Traversal Vulnerability (CNVD-2021-14397)

OpenManage Server Administrator OMSA is a software agent that provides a comprehensive, one-to-one system management solution in two ways: first, through an integrated, Web browser-based graphical user interface GUI; and second, through a command line interface CLI displayed by the operating...

Dell EMC PowerProtect Cyber Recovery Information Disclosure Vulnerability

Dell EMC PowerProtect is an application from Dell Japan. It is used by companies to protect, manage and recover their most critical application data. An information disclosure vulnerability exists in Dell EMC PowerProtect Cyber Recovery version 19.7.0.1. The vulnerability arises from errors such ...