CVE-2021-36349

Published: Jan 24, 2022Modified: Nov 21, 2024

4.3

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts.

Affected (1)

Products: Dell: Emc Data Protection Central

1 product

Emc Data Protection Central

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Dell Emc Data Protection Central	Before 19.6

Related CWEs

Server-Side Request Forgery (SSRF)

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

References (2)

https://www.dell.com/support/kbdoc/000195103

Source: security_alert@emc.com

Vendor Advisory

https://www.dell.com/support/kbdoc/000195103

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.