Vulnerability · Published Apr 30, 2021 · Assigned by dell

CVE-2021-21530

High 8.3

In plain English

A high-severity OS command injection in OpenManage Enterprise from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 60% of all known vulnerabilities).

Severity (CVSS 3.1)8.3High

Exploit odds (30 days)0.9%top 39.6% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with low privileges may potentially exploit the vulnerability to escape from the restricted environment and gain access to sensitive information in the system, resulting in information disclosure and elevation of privilege.

Affected products (as reported)

Vendor	Product	Versions
Dell	OpenManage Enterprise	unspecified – before 1.30.00

Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:H

References

https://www.dell.com/support/kbdoc/000185205 x_refsource_MISC