PT-2021-7317 · Unknown · Networking Os10

James Hebden · Published 2021-11-19 · Updated 2021-11-23 · CVE-2021-36306

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Networking OS10 versions prior to October 2021

Description The issue is related to an authentication bypass vulnerability in the implementation of the RESTCONF API in the Networking OS10. This vulnerability could allow a remote unauthenticated attacker to gain access and perform actions on the affected system.

Recommendations For versions prior to October 2021, consider disabling the RESTCONF API until a patch is available to prevent exploitation of the authentication bypass vulnerability. Restrict access to the system to minimize the risk of unauthorized access.

Fix

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

BDU:2022-05671

CVE-2021-36306

Affected Products

Networking Os10

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-36306 · Security Note
• https://bdu.fstec.ru/vul/2022-05671 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36306 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000193076 · Vendor Advisory
• https://t.me/cibsecurity/32763 · Telegram Post
• https://t.me/cvenotify/23546 · Telegram Post
• https://vuldb.com/?id.187050 · Note