CVE-2021-36339

Published: Jan 21, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.

Affected (13)

Products: Dell: Powermax Os, Solutions Enabler, Solutions Enabler Virtual Appliance, Unisphere 360, Unisphere For Powermax, Unisphere For Powermax Virtual Appliance, Vasa

Dell

7 products

Powermax Os

Solutions Enabler

Solutions Enabler Virtual Appliance

Unisphere 360

Unisphere For Powermax

Unisphere For Powermax Virtual Appliance

Vasa

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler	Before 9.1.0.18
Dell Solutions Enabler	From 9.2.0.0 to 9.2.3.0
Dell Solutions Enabler Virtual Appliance	Before 9.1.0.18
Dell Solutions Enabler Virtual Appliance	From 9.2.0.0 to 9.2.3.0
Dell Unisphere 360	Before 9.1.0.29
Dell Unisphere 360	From 9.2.0.0 to 9.2.3.3
Dell Unisphere For Powermax	Before 9.1.0.31
Dell Unisphere For Powermax	From 9.2.0.0 to 9.2.3.4
Dell Unisphere For Powermax Virtual Appliance	Before 9.1.0.31
Dell Unisphere For Powermax Virtual Appliance	From 9.2.0.0 to 9.2.3.4
Dell Vasa	Before 9.1.0.723
Dell Vasa	From 9.2.0.0 to 9.2.3.0

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (2)

https://www.dell.com/support/kbdoc/000194640

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/000194640

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.