PT-2022-10497 · Dell · Dell Vnx2

Guillaume Quéré · Published 2022-04-08 · Updated 2022-04-14 · CVE-2021-36287

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell VNX2 for file versions 8.1.21.266 and earlier

Description The issue allows unauthenticated remote code execution, which may enable unauthenticated users to execute commands on the system.

Recommendations For versions 8.1.21.266 and earlier, update to a version later than 8.1.21.266 to resolve the issue.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2021-36287

Affected Products

Dell Vnx2

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2021-36287 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36287 · Vendor Advisory
• https://dell.com/support/kbdoc/en-us/000191155/dsa-2021-164-dell-vnx2-control-station-security-update-for-multiple-vulnerabilities · Vendor Advisory
• https://t.me/cibsecurity/40417 · Telegram Post