← Back

CVE-2021-36322

nvd nist
Published: Nov 20, 2021Modified: Jun 17, 2026

JSON object

Loading...
6.1
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Exploitability: 2.8 / Impact: 2.7
Source: NVD

Description

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections.

Affected (9)

Dell
9 products
X1008p Firmware
X1018p Firmware
X1026p Firmware
X1052p Firmware
X4012 Firmware
X1008 Firmware
X1018 Firmware
X1026 Firmware
X1052 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1008p Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1008p
All versions
Configuration B
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1018p Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1018p
All versions
Configuration C
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1026p Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1026p
All versions
Configuration D
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1052p Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1052p
All versions
Configuration E
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X4012 Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X4012
All versions
Configuration F
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1008 Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1008
All versions
Configuration G
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1018 Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1018
All versions
Configuration H
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1026 Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1026
All versions
Configuration I
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
X1052 Firmware
Before 3.0.1.8
Running on/withPlatform Versions
Dell
X1052
All versions

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-74
Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
The product constructs all or part of a command, data structure, or record using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify how it is parsed or interpreted when it is sent to a downstream component.

References (2)

Source: security_alert@emc.com
PatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchVendor Advisory

Timeline

No history available yet.