PT-2021-21216 · Dell Emc · Dell Emc Cloudlink

Published 2021-11-23 · Updated 2021-11-27 · CVE-2021-36314

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC CloudLink versions prior to 7.1

Description The issue allows a remote unauthenticated attacker to potentially exploit the vulnerability, leading to the execution of arbitrary files on the end user system. This could result in unauthorized access and control over the system.

Recommendations For versions prior to 7.1, update to version 7.1 or later to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Related Identifiers

CVE-2021-36314

Affected Products

Dell Emc Cloudlink

References · 5

• https://dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36314 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36314 · Vendor Advisory
• https://t.me/cibsecurity/32871 · Telegram Post
• https://t.me/cvenotify/23837 · Telegram Post