CVE-2021-36322

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections...

CVE-2021-36322

CVE-2021-36322 affects Dell Networking X-Series firmware prior to 3.0.1.8. A host header injection vulnerability allows a remote unauthenticated attacker to inject arbitrary host header values to poison web caches or trigger redirects. Affected component: Dell Networking X-Series firmware (prior ...

CVE-2021-36321

CVE-2021-36321 affects Dell Networking X-Series firmware prior to 3.0.1.8. The issue is an improper input validation vulnerability that could allow a remote unauthenticated attacker to trigger a Denial of Service . A fix is available in firmware 3.0.1.8 and later; applying the Dell advisory updat...

CVE-2021-36321

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service...

CVE-2021-36320

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID...

CVE-2021-36320

CVE-2021-36320 affects Dell Networking X-Series firmware prior to 3.0.1.8, where an authentication bypass allows a remote, unauthenticated attacker to hijack a session by forging the session ID and access the web server. Affected product is Dell Networking X-Series switches; the underlying issue ...

CVE-2021-36319

Dell Networking OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x contain an information exposure vulnerability. A low privileged authenticated malicious user can gain access to SNMP authentication failure messages...

CVE-2021-36319

CVE-2021-36319 affecting Dell Networking OS10: vulnerable in OS10 versions 10.4.3.x, 10.5.0.x and 10.5.1.x. A low-privilege authenticated attacker can access SNMP authentication failure messages, exposing confidential information. Root cause is information disclosure via SNMP failure detail. No r...

CVE-2021-36310

Dell Networking OS10 (Dell) is affected: versions 10.4.3.x through 10.5.2.x contain an uncontrolled resource consumption flaw in the API service that can be exploited by a high-privileged API user to cause a denial of service. The issue is described in PT-2021-21212 with a remediation that recomm...

CVE-2021-36310

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service...

CVE-2021-36308

CVE-2021-36308 affects Dell Networking OS10 (versions with Smart Fabric Services enabled prior to October 2021). The vulnerability is an authentication bypass that allows a remote, unauthenticated attacker to gain access and perform actions on the affected system. Documents consistently describe ...

CVE-2021-36307

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system...

CVE-2021-36307

CVE-2021-36307 describes an elevation-of-privilege vulnerability in Dell Networking OS10 (Linux-based network switch OS) where a malicious low-privilege user with access to RESTCONF/API endpoints could obtain administrator privileges. Affected: OS10 versions prior to October 2021 with RESTCONF AP...

CVE-2021-36306

CVE-2021-36306 affects Dell Networking OS10, specifically versions prior to October 2021 with RESTCONF API enabled. The root cause is an authentication bypass in the RESTCONF interface, enabling a remote unauthenticated attacker to gain access and perform actions on the affected system. The conne...

CVE-2021-36306

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system...

Dell Networking X-Series 注入漏洞

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S. A HOST injection vulnerability exists in Dell Networking X-Series, which can be exploited by remote, unauthenticated attackers to poison web caches or trigger redirects by injecting arbitrary host header values...

Dell Networking X-Series 输入验证错误漏洞

Dell Networking X-Series is a series of intelligent managed switches from Dell, U.S.A. The Dell Networking X-Series is vulnerable to an input validation error that could be exploited by a remote, unauthenticated attacker to trigger a denial of service by sending specially crafted data...

PT-2021-21224 · Dell · Dell Networking X-Series

Name of the Vulnerable Software and Affected Versions: Dell Networking X-Series firmware versions prior to 3.0.1.8 Description: The issue allows a remote unauthenticated attacker to potentially exploit the vulnerability by injecting arbitrary host header values to poison the web-cache or trigger...

Dell Networking OS10 安全漏洞

Dell Networking OS10 is a Linux-based network switch operating system from Dell DELL U.S.A. An elevation of privilege vulnerability exists in Dell Networking OS10, which could be exploited by an attacker with specific API access to gain administrator privileges on the affected system...

PT-2021-21212 · Dell · Dell Networking Os10

Name of the Vulnerable Software and Affected Versions: Dell Networking OS10 versions 10.4.3.x through 10.5.2.x Description: The issue is related to an uncontrolled resource consumption flaw in the API service of Dell Networking OS10. A high-privileged API user may potentially exploit this, leadin...