CVE-2021-36311
Last modified
CVE-2021-36311 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execute it.. EPSS estimates a 0.19% chance of exploitation in the next 30 days.
Description
Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execute it.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Emc Networker | < 19.5.0.0 |
References
- https://www.dell.com/support/kbdoc/000192419Patch, Vendor Advisory
- https://www.dell.com/support/kbdoc/000192419Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-36311?
How severe is CVE-2021-36311?
How do I fix CVE-2021-36311?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-36306Networking OS10, versions prior to October 2021 with RESTCON…9.8
- CVE-2021-36307Networking OS10, versions prior to October 2021 with RESTCON…8.8
- CVE-2021-36308Networking OS10, versions prior to October 2021 with Smart F…9.8
- CVE-2021-36309Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contai…6.5
- CVE-2021-3631A flaw was found in libvirt while it generates SELinux MCS c…6.3
- CVE-2021-36310Dell Networking OS10, versions 10.4.3.x, 10.5.0.x, 10.5.1.x …4.9
- CVE-2021-36312Dell EMC CloudLink 7.1 and all prior versions contain a Hard…9.1
- CVE-2021-36313Dell EMC CloudLink 7.1 and all prior versions contain an OS …7.2
- CVE-2021-36314Dell EMC CloudLink 7.1 and all prior versions contain an Arb…9.8
- CVE-2021-36315Dell EMC PowerScale Nodes contain a hardware design flaw. Th…6.8
- CVE-2021-36316Dell EMC Avamar Server versions 18.2, 19.1, 19.2, 19.3, and …7.2
- CVE-2021-36317Dell EMC Avamar Server version 19.4 contains a plain-text pa…6.7
Are you affected by CVE-2021-36311?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST