1. Home
  2. CVE Database
  3. CVE-2021-36287
HIGH · 7.3

CVE-2021-36287

Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated users to execute commands on the system.

Vulnerability Description

Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated users to execute commands on the system.

CVSS Score

7.3

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
LOW
Integrity
LOW
Availability
LOW

Affected Products

VendorProductVersions
DellEmc Unity Operating Environment<= 8.1.21.266
DellVnx Vg10-
DellVnx Vg50-
DellVnx5200-
DellVnx5400-
DellVnx5600-
DellVnx5800-
DellVnx7600-
DellVnx8000-
DellVnxe1600-

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2021-36287?

CVE-2021-36287 is a vulnerability with a CVSS score of 7.3 (HIGH). Dell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated users to execute commands on the system.

How severe is CVE-2021-36287?

CVE-2021-36287 has been rated HIGH with a CVSS base score of 7.3/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-36287?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Emc Unity Operating Environment, Dell Vnx Vg10, Dell Vnx Vg50, Dell Vnx5200, Dell Vnx5400.