PT-2021-14633 · Dell · Dell Emc Unity+2

Published 2021-07-12 · Updated 2021-07-14 · CVE-2021-21589

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394

Description The issue allows a local authenticated Service user to potentially escalate privileges due to the system not exiting on failed Initialization.

Recommendations For versions prior to 5.1.0.0.5.394, update to version 5.1.0.0.5.394 or later to resolve the issue.

Fix

Related Identifiers

CVE-2021-21589

Affected Products

Dell Emc Unity

Unity Xt

Unityvsa

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-21589 · Security Note
• https://dell.com/support/kbdoc/000189204 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21589 · Vendor Advisory
• https://t.me/cvenotify/17603 · Telegram Post