1. Home
  2. CVE Database
  3. CVE-2021-21512
HIGH · 7.9

CVE-2021-21512

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulne...

Vulnerability Description

Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulnerability leading to the takeover of the notification email account.

CVSS Score

7.9

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
DellEmc Powerprotect Cyber Recovery19.7.0.1

Related Weaknesses (CWE)

CWE-200

References

FAQ

What is CVE-2021-21512?

CVE-2021-21512 is a vulnerability with a CVSS score of 7.9 (HIGH). Dell EMC PowerProtect Cyber Recovery, version 19.7.0.1, contains an Information Disclosure vulnerability. A locally authenticated high privileged Cyber Recovery user may potentially exploit this vulne...

How severe is CVE-2021-21512?

CVE-2021-21512 has been rated HIGH with a CVSS base score of 7.9/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-21512?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Powerprotect Cyber Recovery.