CVE-2021-36313: Command Injection
Dell EMC CloudLink 7.1 and all prior versions contain an OS command injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to the execution of arbitrary OS commands on the application's underlying OS, with the privileges of the vulnerable application. Exploitation may lead to a system take over by an attacker. This vulnerability is considered critical as it may be leveraged to completely compromise the vulnerable application as well as the underlying operating system. Dell recommends customers to upgrade at the earliest opportunity.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36313?
CVE-2021-36313 has been assigned a high severity rating due to its potential for remote exploitation.
How do I fix CVE-2021-36313?
To fix CVE-2021-36313, upgrade Dell EMC CloudLink to version 7.1.2 or higher, which addresses this vulnerability.
What systems are affected by CVE-2021-36313?
CVE-2021-36313 affects Dell EMC CloudLink version 7.1 and all prior versions.
What types of attacks does CVE-2021-36313 enable?
CVE-2021-36313 enables remote attackers to execute arbitrary OS commands on the underlying operating system.
Who is primarily at risk from CVE-2021-36313?
High privileged attackers are primarily at risk from exploiting CVE-2021-36313 due to the nature of the vulnerability.