PT-2021-14586 · Dell · Dell Hybrid Client

Published 2021-04-30 · Updated 2021-05-06 · CVE-2021-21536

Positive Technologies (AI Summary)

CVSS v3.1

6.2

Medium

Base vector

AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dell Hybrid Client versions prior to 1.5

Description The issue allows a local unauthenticated attacker to exploit it and register the client to a server, potentially viewing sensitive information.

Recommendations For versions prior to 1.5, update to version 1.5 or later to resolve the issue.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2021-21536

Affected Products

Dell Hybrid Client

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-21536 · Security Note
• https://osv.dev/vulnerability/CVE-2021-21536 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://t.me/cvenotify/14176 · Telegram Post