Browse CVEs

MEDIUM 6.7 CVE-2022-23156 Wyse Device Agent version 14.6.1.4 and below contain an Improper Authentication vulnerability. A malicious user could potentially exploit this vulner… Wyse Device Agent after 14.6.1.4 Fix from $1,6002022-04-01 HIGH 7.8 CVE-2022-24419 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.20 / 1.13.0+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24420 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.20 / 1.13.0+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24421 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.20 / 1.13.0+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24415 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.20 / 1.13.0+ Fix from $1,9502022-03-11 HIGH 7.8 CVE-2022-24416 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Alienware 13 R3 Firmware 1.0.20 / 1.13.0+ Fix from $1,9502022-03-11 MEDIUM 6.0 CVE-2021-43590 Dell EMC Enterprise Storage Analytics for vRealize Operations, versions 4.0.1 to 6.2.1, contain a Plain-text password storage vulnerability. A local … Enterprise Storage Analytics after 6.2.1 Fix from $1,6002022-03-04 HIGH 7.5 CVE-2022-24409 Dell BSAFE SSL-J contains remediation for a covert timing channel vulnerability that may be exploited by malicious users to compromise the affected s… Bsafe Ssl J 6.4+ Fix from $1,9502022-02-23 CRITICAL 9.9 CVE-2021-36302 All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with stan… Emc Integrated System For Microsoft Azure Stack Hub Firmware after 2204 Fix from $2,3002022-02-09 HIGH 7.2 CVE-2022-22566 Select Dell Client Commercial and Consumer platforms contain a pre-boot direct memory access (DMA) vulnerability. An authenticated attacker with phys… Alienware Area 51m R1 Firmware 1.6.0 / 1.6.2+ Fix from $1,9502022-02-09 MEDIUM 5.1 CVE-2022-22567 Select Dell Client Commercial and Consumer platforms are vulnerable to an insufficient verification of data authenticity vulnerability. An authentica… Alienware Area 51m R1 Firmware 1.6.0 / 1.6.2+ Fix from $1,6002022-02-09 CRITICAL 9.8 CVE-2021-36294 Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit … Emc Unity Operating Environment after 8.1.21.266 Fix from $2,3002022-01-25 HIGH 8.1 CVE-2021-36348 iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potential… Integrated Dell Remote Access Controller 9 Firmware 5.00.20.00+ Fix from $1,9502022-01-25 HIGH 7.8 CVE-2021-36289 Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit t… Emc Unity Operating Environment after 8.1.21.266 Fix from $1,9502022-01-25 HIGH 7.2 CVE-2021-36295 Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with pri… Emc Unity Operating Environment after 8.1.21.266 Fix from $1,9502022-01-25 HIGH 7.2 CVE-2021-36296 Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authenticated remote code execution vulnerability. A remote malicious user with pri… Emc Unity Operating Environment after 8.1.21.266 Fix from $1,9502022-01-25 HIGH 7.2 CVE-2021-36347 iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated rem… Integrated Dell Remote Access Controller 8 Firmware 2.82.82.82 / 5.00.20.00+ Fix from $1,9502022-01-25 MEDIUM 5.3 CVE-2021-36346 Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this… Integrated Dell Remote Access Controller 8 Firmware 2.82.82.82+ Fix from $1,6002022-01-25 HIGH 7.5 CVE-2021-43588 Dell EMC Data Protection Central version 19.5 contains an Improper Input Validation Vulnerability. A remote unauthenticated attacker could potentiall… Emc Data Protection Central 19.6+ Fix from $1,9502022-01-24 MEDIUM 6.7 CVE-2021-43589 Dell EMC Unity, Dell EMC UnityVSA and Dell EMC Unity XT versions prior to 5.1.2.0.5.007 contain an operating system (OS) command injection Vulnerabil… Emc Unity Operating Environment 5.1.2.0.5.007+ Fix from $1,6002022-01-24 MEDIUM 6.4 CVE-2021-36343 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Precision 5820 Tower Firmware 1.5.0 / 1.10.1+ Fix from $1,6002022-01-24 MEDIUM 5.5 CVE-2022-22554 Dell EMC System Update, version 1.9.2 and prior, contain an Unprotected Storage of Credentials vulnerability. A local attacker with user privleges co… Emc System Update after 1.9.2.0 Fix from $1,6002022-01-24 MEDIUM 6.4 CVE-2021-36342 Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by usi… Precision 7510 Firmware 1.5.0 / 1.10.1+ Fix from $1,6002022-01-24 CRITICAL 9.8 CVE-2022-22553 Dell EMC AppSync versions 3.9 to 4.3 contain an Improper Restriction of Excessive Authentication Attempts Vulnerability that can be exploited from UI… Emc Appsync 4.4.0.0+ Fix from $2,3002022-01-21 HIGH 8.8 CVE-2022-22551 DELL EMC AppSync versions 3.9 to 4.3 use GET request method with sensitive query strings. An Adjacent, unauthenticated attacker could potentially exp… Emc Appsync 4.4.0.0+ Fix from $1,9502022-01-21 MEDIUM 6.1 CVE-2022-22552 Dell EMC AppSync versions 3.9 to 4.3 contain a clickjacking vulnerability in AppSync. A remote unauthenticated attacker could potentially exploit thi… Emc Appsync 4.4.0.0+ Fix from $1,6002022-01-21 HIGH 8.0 CVE-2021-36338 Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability. An adjacent malicious user could potentially exploit … Solutions Enabler 9.1.0.18 / 9.1.0.29+ Fix from $1,9502022-01-21 HIGH 7.8 CVE-2021-36339 The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability … Solutions Enabler 9.1.0.18 / 9.1.0.29+ Fix from $1,9502022-01-21 CRITICAL 9.8 CVE-2021-36336 Wyse Management Suite 3.3.1 and below versions contain a deserialization vulnerability that could allow an unauthenticated attacker to execute code o… Wyse Management Suite after 3.3.1 Fix from $2,3002021-12-21 HIGH 7.5 CVE-2021-36350 Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an authentication bypass by primary weakness in one of the authentication factors. A remote un… Powerscale Onefs 9.3.1.0+ Fix from $1,9502021-12-21