CVE-2021-36310

Published: Nov 20, 2021Modified: Jun 17, 2026

4.9

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Exploitability: 1.2 / Impact: 3.6

Source: NVD

Description

Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x & 10.5.2.x, contain an uncontrolled resource consumption flaw in its API service. A high-privileged API user may potentially exploit this vulnerability, leading to a denial of service.

Affected (4)

Products: Dell: Networking Os10

Dell

1 product

Networking Os10

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Dell Networking Os10	Before 10.4.3.8
Dell Networking Os10	From 10.5.0.0 to 10.5.0.10
Dell Networking Os10	From 10.5.1.0 to 10.5.1.10
Dell Networking Os10	From 10.5.2.0 to 10.5.2.8

Related CWEs

CWE-400

Uncontrolled Resource Consumption

The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.

CWE-693

Protection Mechanism Failure

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

References (2)

https://www.dell.com/support/kbdoc/en-us/000193076

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/en-us/000193076

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.