CVE-2021-36313: Command Injection
First published: Tue Nov 23 2021(Updated: )
Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it may be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell EMC Cloud Link | <7.1.1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2021-36313?
CVE-2021-36313 has been assigned a high severity rating due to its potential for remote exploitation.
How do I fix CVE-2021-36313?
To fix CVE-2021-36313, upgrade Dell EMC CloudLink to version 7.1.2 or higher, which addresses this vulnerability.
What systems are affected by CVE-2021-36313?
CVE-2021-36313 affects Dell EMC CloudLink version 7.1 and all prior versions.
What types of attacks does CVE-2021-36313 enable?
CVE-2021-36313 enables remote attackers to execute arbitrary OS commands on the underlying operating system.
Who is primarily at risk from CVE-2021-36313?
High privileged attackers are primarily at risk from exploiting CVE-2021-36313 due to the nature of the vulnerability.
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/author
- agent/severity
- agent/references
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/first-publish-date
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/dell
- canonical/dell emc cloud link