CVE-2021-21531

Published: Apr 30, 2021Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monitor role may exploit this vulnerability to perform unauthorized actions.

Affected (9)

Products: Dell: Powermax Os, Solutions Enabler, Solutions Enabler Virtual Appliance, Unisphere For Powermax, Unisphere For Powermax Virtual Appliance

Dell

5 products

Powermax Os

Solutions Enabler

Solutions Enabler Virtual Appliance

Unisphere For Powermax

Unisphere For Powermax Virtual Appliance

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler	version < 9.1.0.15
Dell Solutions Enabler	9.2.0 ≤ version < 9.2.1.6
Dell Solutions Enabler Virtual Appliance	version < 9.1.0.15
Dell Solutions Enabler Virtual Appliance	9.2.0 ≤ version < 9.2.1.1
Dell Unisphere For Powermax	version < 9.1.0.26
Dell Unisphere For Powermax	9.2.1.0 ≤ version ≤ 9.2.1.6
Dell Unisphere For Powermax Virtual Appliance	version < 9.1.0.26
Dell Unisphere For Powermax Virtual Appliance	9.2.1.0 ≤ version < 9.2.1.6

Related CWEs

CWE-602

Client-Side Enforcement of Server-Side Security

The product is composed of a server that relies on the client to implement a mechanism that is intended to protect the server.

CWE-669

Incorrect Resource Transfer Between Spheres

The product does not properly transfer a resource/behavior to another sphere, or improperly imports a resource/behavior from another sphere, in a manner that provides unintended control over that resource.

References (2)

https://www.dell.com/support/kbdoc/000184565

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000184565

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.