Vulnerability · Published Jan 21, 2022 · Assigned by dell
CVE-2021-36339
High 7.8
In plain English
A high-severity security flaw in Solutions Enabler vApp from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Severity (CVSS 3.1)7.8High
Exploit odds (30 days)0.2%top 85.1% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Solutions Enabler vApp | unspecified – before 9.2.2.2 |
Weakness: CWE-250 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
References
- https://www.dell.com/support/kbdoc/000194640 x_refsource_MISC