PT-2022-10506 · Dell Emc · Dell Emc Virtual Appliances

Published 2022-01-21 · Updated 2022-10-27 · CVE-2021-36339

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC Virtual Appliances versions prior to 9.2.2.2

Description The issue concerns undocumented user accounts in the Dell EMC Virtual Appliances, which a local malicious user could exploit to gain privileged access to the virtual appliance.

Recommendations For versions prior to 9.2.2.2, update to version 9.2.2.2 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2021-36339

Affected Products

Dell Emc Virtual Appliances

References · 4

• https://dell.com/support/kbdoc/000194640 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36339 · Security Note
• https://osv.dev/vulnerability/CVE-2021-36339 · Vendor Advisory
• https://t.me/cibsecurity/36082 · Telegram Post