CVE-2021-21570: OS Command Injection

Q: What is the severity of CVE-2021-21570?

CVE-2021-21570 is classified as an Information Disclosure vulnerability.

Q: How do I fix CVE-2021-21570?

To fix CVE-2021-21570, upgrade Dell NetWorker to a version beyond 19.4.0.4 or apply the recommended patches.

Q: What versions of Dell NetWorker are affected by CVE-2021-21570?

Dell NetWorker versions 18.x and 19.x, specifically between 18.1.0.1 and 19.4.0.4, are affected by CVE-2021-21570.

Q: Can remote users exploit CVE-2021-21570?

Yes, a NetWorker server user with remote access can potentially exploit CVE-2021-21570 to access unauthorized information.

Q: What type of information can be disclosed due to CVE-2021-21570?

CVE-2021-21570 may allow unauthorized access to sensitive information stored on NetWorker clients.

Published Sep 28, 2021

Updated

Dell NetWorker, versions 18.x and 19.x contain an Information disclosure vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially exploit this vulnerability and gain access to unauthorized information.

Affected Software

1 affected component

Dell EMC NetWorker>=18.1.0.1<19.4.0.4

Remediation

Patch Available

https://www.dell.com/support/kbdoc/en-us/000188311/dsa-2021-124-dell-networker-security-update-for-multiple-vulnerabilities

Event History

Sep 28, 2021

CVE Published

via MITRE·07:20 PM

Data Sourced

via MITRE·07:20 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-21570?

CVE-2021-21570 is classified as an Information Disclosure vulnerability.

How do I fix CVE-2021-21570?

To fix CVE-2021-21570, upgrade Dell NetWorker to a version beyond 19.4.0.4 or apply the recommended patches.

What versions of Dell NetWorker are affected by CVE-2021-21570?