CVE-2021-36320

Published: Nov 20, 2021Modified: Jun 17, 2026

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID.

Affected (9)

Products: Dell: X1008p Firmware, X1018p Firmware, X1026p Firmware, X1052p Firmware, X4012 Firmware, X1008 Firmware, X1018 Firmware, X1026 Firmware, X1052 Firmware

9 products

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1008p Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1008p	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1018p Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1018p	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1026p Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1026p	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1052p Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1052p	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X4012 Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X4012	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1008 Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1008	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1018 Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1018	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1026 Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1026	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Dell X1052 Firmware	Before 3.0.1.8

Running on/with	Platform Versions
Dell X1052	All versions

Related CWEs

CWE-331

Insufficient Entropy

The product uses an algorithm or scheme that produces insufficient entropy, leaving patterns or clusters of values that are more likely to occur than others.

References (2)

https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.