CVE-2021-21527: OS Command Injection
Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may allow an authenticated user with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges to escalate privileges.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-21527?
CVE-2021-21527 has a high severity rating due to its potential for privilege escalation.
How do I fix CVE-2021-21527?
To fix CVE-2021-21527, update Dell PowerScale OneFS to a version that addresses the vulnerability, specifically version 9.1.0.0 or later.
Who is affected by CVE-2021-21527?
Authenticated users with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE privileges on Dell PowerScale OneFS are affected by CVE-2021-21527.
What systems are vulnerable to CVE-2021-21527?
CVS-2021-21527 affects Dell EMC PowerScale OneFS versions 9.0.0.0 and 9.1.0.0.
What is the impact of CVE-2021-21527?
The impact of CVE-2021-21527 includes the potential for an authenticated user to escalate their privileges, leading to unauthorized access.