CVE-2021-21600

Published: Aug 10, 2021Modified: Nov 21, 2024

6.5

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Exploitability: 2.8 / Impact: 3.6

Source: NVD

Description

Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path.

Affected (1)

Products: Dell: Emc Networker

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Networker	From 18.1.0.1 to 19.4.0.0

Related CWEs

Missing Release of Resource after Effective Lifetime

The product does not release a resource after its effective lifetime has ended, i.e., after the resource is no longer needed.

References (2)

https://www.dell.com/support/kbdoc/000189694

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/000189694

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.