PT-2021-14575 · Dell · Dell Srm+1

An Trinh · Published 2021-04-12 · Updated 2021-04-22 · CVE-2021-21524

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dell SRM versions prior to 4.5.0.1 Dell SMR versions prior to 4.5.0.1

Description The issue allows a remote unauthenticated attacker to potentially exploit an Untrusted Deserialization Vulnerability, leading to arbitrary privileged code execution on the vulnerable application. This may result in system compromise by unauthenticated attackers.

Recommendations For Dell SRM versions prior to 4.5.0.1, update to version 4.5.0.1 or later. For Dell SMR versions prior to 4.5.0.1, update to version 4.5.0.1 or later.

Fix

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

CVE-2021-21524

Affected Products

Dell Smr

Dell Srm

References · 3

• https://osv.dev/vulnerability/CVE-2021-21524 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21524 · Security Note