CVE-2021-36287: OS Command Injection
First published: Thu Mar 31 2022(Updated: )
Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated users to execute commands on the system.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Unity Operating Environment | <=8.1.21.266 | |
| Dell Vnx Vg10 | ||
| Dell Vnx Vg50 | ||
| Dell Vnx5200 | ||
| Dell Vnx5400 | ||
| Dell Vnx5600 | ||
| Dell Vnx5800 | ||
| Dell Vnx7600 | ||
| Dell Vnx8000 | ||
| Dell Vnxe1600 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID for this Dell VNX2 vulnerability?
The vulnerability ID for this Dell VNX2 vulnerability is CVE-2021-36287.
What is the severity of CVE-2021-36287?
The severity of CVE-2021-36287 is critical with a score of 9.8.
What software versions are affected by CVE-2021-36287?
Dell VNX2 for file version 8.1.21.266 and earlier are affected by CVE-2021-36287.
How can an unauthenticated user exploit CVE-2021-36287?
An unauthenticated user can exploit CVE-2021-36287 to execute commands on the system.
How can I fix CVE-2021-36287?
To fix CVE-2021-36287, apply the security update provided by Dell and referenced in the Dell support knowledge base article.
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/severity
- agent/last-modified-date
- agent/references
- agent/tags
- agent/type
- agent/description
- agent/first-publish-date
- agent/event
- vendor/dell
- canonical/dell emc unity operating environment
- version/dell emc unity operating environment/8.1.21.266
- canonical/dell vnx vg10
- canonical/dell vnx vg50
- canonical/dell vnx5200
- canonical/dell vnx5400
- canonical/dell vnx5600
- canonical/dell vnx5800
- canonical/dell vnx7600
- canonical/dell vnx8000
- canonical/dell vnxe1600