Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2021-21536 State: PUBLISHED Published: 2021-04-30T17:40:18.655559Z Last Updated: 2024-09-17T04:04:53.295Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell Hybrid Client (DHC) Problem Types: CWE-200 Description: Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to register the client to a server in order to view sensitive information. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabili
ps://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21537 State: PUBLISHED Published: 2021-04-30T17:40:19.290553Z Last Updated: 2024-09-16T17:52:51.300Z Severity: MEDIUM (CVSS 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N) Vendors: Dell Products: Dell Hybrid Client (DHC) Problem Types: CWE-200 Description: Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to view and exfiltrate sensitive information on the system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000184667/dsa-2021-071-dell-hybrid-client-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21538 State: PUBLISHED Published: 2021-07-29T15:55:17.320215Z Last Updated: 2024-09-17T01:07:08.122Z Severity: CRITICAL (CVSS 9.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-287 Description: Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the virtual console. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000186420
CVE ID: CVE-2021-21539 State: PUBLISHED Published: 2021-04-30T20:55:18.417395Z Last Updated: 2024-09-16T16:58:47.474Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: Other Description: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC through the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell
ssing iDRAC through the web interface. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185293
CVE ID: CVE-2021-21540 State: PUBLISHED Published: 2021-04-30T20:55:19.049678Z Last Updated: 2024-09-16T20:01:18.387Z Severity: MEDIUM (CVSS 5.9 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:L) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-121 Description: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to overwrite configuration information by injecting arbitrarily large payload. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185293
CVE ID: CVE-2021-21541 State: PUBLISHED Published: 2021-04-30T20:55:19.672496Z Last Updated: 2024-09-16T17:38:25.537Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.
in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185293
CVE ID: CVE-2021-21542 State: PUBLISHED Published: 2021-04-30T20:55:20.339400Z Last Updated: 2024-09-17T01:11:50.815Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected while generating a certificate. When victim users access the submitted data through their browsers, the malicious code
d while generating a certificate. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185293
CVE ID: CVE-2021-21543 State: PUBLISHED Published: 2021-04-30T20:55:20.950938Z Last Updated: 2024-09-16T19:40:30.743Z Severity: MEDIUM (CVSS 4.8 CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-79 Description: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high privileges could potentially exploit these vulnerabilities to store malicious HTML or JavaScript code through multiple affected parameters. When victim users access the submitted data through their browsers, the malicious code gets executed by th
d parameters. When victim users access the submitted data through their browsers, the malicious code gets executed by the web browser in the context of the vulnerable application. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185293
CVE ID: CVE-2021-21544 State: PUBLISHED Published: 2021-04-30T20:55:21.560938Z Last Updated: 2024-09-17T03:28:36.215Z Severity: LOW (CVSS 2.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N) Vendors: Dell Products: Integrated Dell Remote Access Controller (iDRAC) Problem Types: CWE-602 Description: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185293
CVE ID: CVE-2021-21545 State: PUBLISHED Published: 2021-04-12T19:50:17.296718Z Last Updated: 2024-09-16T17:44:09.702Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell Peripheral Manager Problem Types: CWE-427 Description: Dell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation vulnerability that could be potentially exploited to gain arbitrary code execution on the system with privileges of the system user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000185100/dsa-2021-079-dell-client-security-update-for-dell-peripheral-manager-local-privileg
ll.com/support/kbdoc/en-us/000185100/dsa-2021-079-dell-client-security-update-for-dell-peripheral-manager-local-privilege-escalation-vulnerability
CVE ID: CVE-2021-21546 State: PUBLISHED Published: 2021-07-29T15:55:18.879445Z Last Updated: 2024-09-16T23:56:47.044Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: NetWorker Problem Types: CWE-532 Description: Dell EMC NetWorker versions 18.x,19.x prior to 19.3.0.4 and 19.4.0.0 contain an Information Disclosure in Log Files vulnerability. A local low-privileged user of the Networker server could potentially exploit this vulnerability to read plain-text credentials from server log files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000185470/dsa-2021-081-dell-emc-networker-security-up
Container: References: - https://www.dell.com/support/kbdoc/en-us/000185470/dsa-2021-081-dell-emc-networker-security-update-for-a-clear-text-vulnerability
CVE ID: CVE-2021-21547 State: PUBLISHED Published: 2021-04-30T21:10:19.233760Z Last Updated: 2024-09-16T18:34:33.545Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unity Problem Types: Other Description: Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Readiness Utility is run on the system. The credentials of the Unisphere Administrator are stored in plain text. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user. Additional Analyst Notes: - CVE Program Container: Ref
sword to gain access with the privileges of the compromised user. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185484
CVE ID: CVE-2021-21548 State: PUBLISHED Published: 2023-03-17T05:07:42.867Z Last Updated: 2025-02-26T14:56:10.218Z Severity: HIGH (CVSS 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Unisphere for PowerMax, Dell EMC Unisphere for PowerMax Virtual Appliance , PowerMax OS Problem Types: CWE-295 Description: Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted cert
attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-uk/000189606/dsa-2021-134-dell-emc-unisphere-for-powermax-dell-emc-unisphere-for-powermax-virtual-appliance-dell-emc-solutions-enabler-virtual-appliance-and-dell-emc-powermax-embedded-management-security-update-for-multiple-third-party-component-vulnerabilities
CVE ID: CVE-2021-21549 State: PUBLISHED Published: 2021-05-21T20:05:11.576221Z Last Updated: 2024-09-16T18:08:03.709Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: XtremIO Problem Types: CWE-352 Description: Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially exploit this vulnerability, leading to a privileged victim application user being tricked into sending state-changing requests to the vulnerable application, causing unintended server operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/
server operations. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000186363
CVE ID: CVE-2021-21550 State: PUBLISHED Published: 2021-05-06T12:40:36.679454Z Last Updated: 2024-09-16T20:01:16.638Z Severity: MEDIUM (CVSS 6 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-78 Description: Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability can allow an authenticated user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges to escalate privileges. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000185978
CVE ID: CVE-2021-21551 State: PUBLISHED Published: 2021-05-04T15:15:21.388Z Last Updated: 2025-10-21T23:25:47.458Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: dbutil Problem Types: CWE-782 Description: Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.dell.com/support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-cont
support/kbdoc/en-us/000186019/dsa-2021-088-dell-client-platform-security-update-for-dell-driver-insufficient-access-control-vulnerability - http://packetstormsecurity.com/files/162604/Dell-DBUtil_2_3.sys-IOCTL-Memory-Read-Write.html - http://packetstormsecurity.com/files/162739/DELL-dbutil_2_3.sys-2.3-Arbitrary-Write-Privilege-Escalation.html
CVE ID: CVE-2021-21552 State: PUBLISHED Published: 2021-05-21T20:05:12.221672Z Last Updated: 2024-09-16T23:46:54.903Z Severity: MEDIUM (CVSS 5.2 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: Dell Products: Wyse Windows Embedded (WES) Problem Types: CWE-863 Description: Dell Wyse Windows Embedded System versions WIE10 LTSC 2019 and earlier contain an improper authorization vulnerability. A local authenticated malicious user with low privileges may potentially exploit this vulnerability to bypass the restricted environment and perform unauthorized actions on the affected system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/0
cted system. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000186134/dsa-2021-096-dell-wyse-windows-embedded-system-security-update-for-an-improper-authorization-vulnerability
CVE ID: CVE-2021-21553 State: PUBLISHED Published: 2021-08-02T23:45:14.588862Z Last Updated: 2024-09-17T03:54:58.333Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-286 Description: Dell PowerScale OneFS versions 8.1.0-9.1.0 contain an Incorrect User Management vulnerability.under some specific conditions, this can allow the CompAdmin user to elevate privileges and break out of Compliance mode. This is a critical vulnerability and Dell recommends upgrading at the earliest. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000188148
CVE ID: CVE-2021-21554 State: PUBLISHED Published: 2021-06-14T19:10:14.618136Z Last Updated: 2024-09-16T16:42:32.445Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Dell Products: PowerEdge BIOS Intel 15G Problem Types: CWE-122 Description: Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer overflow vulnerability in systems with Intel Optane DC Persistent Memory installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Prebo
vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000187958
CVE ID: CVE-2021-21555 State: PUBLISHED Published: 2021-06-14T19:10:15.341153Z Last Updated: 2024-09-16T22:29:57.065Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Dell Products: PowerEdge BIOS Intel 15G Problem Types: CWE-122 Description: Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. Additional Analyst Notes: - CVE Prog
rary code execution, or information disclosure in UEFI or BIOS Preboot Environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000187958
CVE ID: CVE-2021-21556 State: PUBLISHED Published: 2021-06-14T19:10:15.963590Z Last Updated: 2024-09-17T01:40:39.312Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:L) Vendors: Dell Products: PowerEdge BIOS Intel 15G Problem Types: CWE-121 Description: Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in systems with NVDIMM-N installed. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of Service, arbitrary code execution, or information disclosure in UEFI or BIOS Preboot Environment. Additional Analyst Notes: - CVE Pro
trary code execution, or information disclosure in UEFI or BIOS Preboot Environment. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000187958
CVE ID: CVE-2021-21557 State: PUBLISHED Published: 2021-06-14T19:10:16.639445Z Last Updated: 2024-09-16T17:02:41.587Z Severity: HIGH (CVSS 8.1 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:L) Vendors: Dell Products: PowerEdge BIOS Intel 15G Problem Types: CWE-20 Description: Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high privileges may potentially exploit this vulnerability, leading to a denial of service, arbitrary code execution, or information disclosure in System Management Mode. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000187958
CVE ID: CVE-2021-21558 State: PUBLISHED Published: 2021-06-08T18:05:43.419897Z Last Updated: 2024-09-16T21:08:13.066Z Severity: HIGH (CVSS 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H) Vendors: Dell Products: NetWorker Problem Types: CWE-532 Description: Dell EMC NetWorker, 18.x, 19.1.x, 19.2.x 19.3.x, 19.4 and 19.4.0.1, contains an Information Disclosure vulnerability. A local administrator of the gstd system may potentially exploit this vulnerability to read LDAP credentials from local logs and use the stolen credentials to make changes to the network domain. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000186638/dsa-2021-104
al Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000186638/dsa-2021-104-dell-emc-networker-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21559 State: PUBLISHED Published: 2021-06-08T18:05:47.368660Z Last Updated: 2024-09-17T01:51:32.485Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:A/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H) Vendors: Dell Products: NetWorker Problem Types: CWE-295 Description: Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in the client (NetWorker Management Console) components which uses SSL encrypted connection in order to communicate with the application server. An unauthenticated attacker in the same network collision domain as the NetWorker Management Console client could potentially exploit this vulnerability to perfor
twork collision domain as the NetWorker Management Console client could potentially exploit this vulnerability to perform man-in-the-middle attacks to intercept and tamper the traffic between the client and the application server. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/en-us/000186638/dsa-2021-104-dell-emc-networker-security-update-for-multiple-vulnerabilities
CVE ID: CVE-2021-21561 State: PUBLISHED Published: 2021-11-23T20:00:30.258071Z Last Updated: 2024-09-16T19:20:53.782Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-532 Description: Dell PowerScale OneFS version 8.1.2 contains a sensitive information exposure vulnerability. This would allow a malicious user with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE privileges to gain access to sensitive information in the log files. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000191265
CVE ID: CVE-2021-21562 State: PUBLISHED Published: 2021-08-02T23:45:16.289414Z Last Updated: 2024-09-17T01:25:32.087Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-426 Description: Dell EMC PowerScale OneFS contains an untrusted search path vulnerability. This vulnerability allows a user with (ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE) and (ISI_PRIV_SYS_UPGRADE or ISI_PRIV_AUDIT) to provide an untrusted path which can lead to run resources that are not under the application’s direct control. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000188148
CVE ID: CVE-2021-21563 State: PUBLISHED Published: 2021-08-02T23:45:17.853847Z Last Updated: 2024-09-16T18:07:53.791Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-754 Description: Dell EMC PowerScale OneFS versions 8.1.2-9.1.0.x contain an Improper Check for Unusual or Exceptional Conditions in its auditing component.This can lead to an authenticated user with low-privileges to trigger a denial of service event. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000188148
CVE ID: CVE-2021-21564 State: PUBLISHED Published: 2021-08-09T21:05:17.190910Z Last Updated: 2024-09-17T03:12:40.744Z Severity: CRITICAL (CVSS 9.8 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) Vendors: Dell Products: Dell OpenManage Enterprise Problem Types: CWE-200 Description: Dell OpenManage Enterprise versions prior to 3.6.1 contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to hijack an elevated session or perform unauthorized actions by sending malformed data. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000189673
CVE ID: CVE-2021-21565 State: PUBLISHED Published: 2021-08-02T23:45:19.451823Z Last Updated: 2024-09-16T20:59:12.263Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L) Vendors: Dell Products: PowerScale OneFS Problem Types: CWE-400 Description: Dell PowerScale OneFS versions 9.1.0.3 and earlier contain a denial of service vulnerability. SmartConnect had an error condition that may be triggered to loop, using CPU and potentially preventing other SmartConnect DNS responses. Additional Analyst Notes: - CVE Program Container: References: - https://www.dell.com/support/kbdoc/000188148