CVE-2021-36339

Published: Jan 21, 2022Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.

Affected (13)

Products: Dell: Powermax Os, Solutions Enabler, Solutions Enabler Virtual Appliance, Unisphere 360, Unisphere For Powermax, Unisphere For Powermax Virtual Appliance, Vasa

Dell

7 products

Powermax Os

Solutions Enabler

Solutions Enabler Virtual Appliance

Unisphere 360

Unisphere For Powermax

Unisphere For Powermax Virtual Appliance

Vasa

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Dell Powermax Os	Version 5978
Dell Solutions Enabler	version < 9.1.0.18
Dell Solutions Enabler	9.2.0.0 ≤ version < 9.2.3.0
Dell Solutions Enabler Virtual Appliance	version < 9.1.0.18
Dell Solutions Enabler Virtual Appliance	9.2.0.0 ≤ version < 9.2.3.0
Dell Unisphere 360	version < 9.1.0.29
Dell Unisphere 360	9.2.0.0 ≤ version < 9.2.3.3
Dell Unisphere For Powermax	version < 9.1.0.31
Dell Unisphere For Powermax	9.2.0.0 ≤ version < 9.2.3.4
Dell Unisphere For Powermax Virtual Appliance	version < 9.1.0.31
Dell Unisphere For Powermax Virtual Appliance	9.2.0.0 ≤ version < 9.2.3.4
Dell Vasa	version < 9.1.0.723
Dell Vasa	9.2.0.0 ≤ version < 9.2.3.0

Related CWEs

CWE-250

Execution with Unnecessary Privileges

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

References (2)

https://www.dell.com/support/kbdoc/000194640

Source: security_alert@emc.com

PatchVendor Advisory

https://www.dell.com/support/kbdoc/000194640

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

Timeline

No history available yet.