CVE-2021-36339: High severity emc solutions enabler vulnerability
The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-36339?
CVE-2021-36339 is a vulnerability found in Dell EMC Virtual Appliances that allows local malicious users to gain privileged access.
Which software versions are affected by CVE-2021-36339?
Affected software versions include Dell Solutions Enabler (up to 9.1.0.18 and 9.2.0.0 to 9.2.3.0), Dell Solutions Enabler Virtual Appliance (up to 9.1.0.18 and 9.2.0.0 to 9.2.3.0), Dell Unisphere 360 (up to 9.1.0.29 and 9.2.0.0 to 9.2.3.3), Dell Unisphere for PowerMax (up to 9.1.0.31 and 9.2.0.0 to 9.2.3.4), Dell Unisphere For Powermax Virtual Appliance (up to 9.1.0.31 and 9.2.0.0 to 9.2.3.4), and Dell Vasa (up to 9.1.0.723 and 9.2.0.0 to 9.2.3.0).
What is the severity of CVE-2021-36339?
CVE-2021-36339 has a severity rating of 7.8 (high).
How can a local malicious user exploit CVE-2021-36339?
A local malicious user can exploit CVE-2021-36339 to gain privileged access to the Dell EMC Virtual Appliance.
Where can I find more information about CVE-2021-36339?
You can find more information about CVE-2021-36339 on the Dell support website at https://www.dell.com/support/kbdoc/000194640.