CVE-2021-21531

Published: Apr 30, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions.

Affected (9)

Products: Dell: Powermax Os, Solutions Enabler, Solutions Enabler Virtual Appliance, Unisphere For Powermax, Unisphere For Powermax Virtual Appliance

Dell

5 products

Powermax Os

Solutions Enabler

Solutions Enabler Virtual Appliance

Unisphere For Powermax

Unisphere For Powermax Virtual Appliance

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler	Before 9.1.0.15
Dell Solutions Enabler	From 9.2.0 to 9.2.1.6
Dell Solutions Enabler Virtual Appliance	Before 9.1.0.15
Dell Solutions Enabler Virtual Appliance	From 9.2.0 to 9.2.1.1
Dell Unisphere For Powermax	Before 9.1.0.26
Dell Unisphere For Powermax	From 9.2.1.0 to 9.2.1.6
Dell Unisphere For Powermax Virtual Appliance	Before 9.1.0.26
Dell Unisphere For Powermax Virtual Appliance	From 9.2.1.0 to 9.2.1.6

Related CWEs

CWE-602

Client-Side Enforcement of Server-Side Security

The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

CWE-669

Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (2)

https://www.dell.com/support/kbdoc/000184565

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000184565

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.