Browse CVEs

MEDIUM 6.5 CVE-2021-21571 Dell UEFI BIOS https stack leveraged by the Dell BIOSConnect feature and Dell HTTPS Boot feature contains an improper certificate validation vulnerab… Alienware M15 R6 Firmware 1.3.3 / 1.4.0+ Fix from $1,6002021-06-24 MEDIUM 6.7 CVE-2021-21554 Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and, Dell Precision 7920 Rack Workstation BIOS contain a stack-based buffer ov… Poweredge R640 Firmware 2.9.4+ Fix from $1,6002021-06-14 MEDIUM 6.7 CVE-2021-21555 Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a heap-based buffer overflow vulnerability in sys… Poweredge R640 Firmware 2.11.2+ Fix from $1,6002021-06-14 MEDIUM 6.7 CVE-2021-21556 Dell PowerEdge R640, R740, R740XD, R840, R940, R940xa, MX740c, MX840c, and T640 Server BIOS contain a stack-based buffer overflow vulnerability in sy… Poweredge R640 Firmware 2.11.2+ Fix from $1,6002021-06-14 MEDIUM 6.7 CVE-2021-21557 Dell PowerEdge Server BIOS and select Dell Precision Rack BIOS contain an out-of-bounds array access vulnerability. A local malicious user with high … Poweredge R640 Firmware 2.11.2+ Fix from $1,6002021-06-14 MEDIUM 5.3 CVE-2021-21559 Dell EMC NetWorker, versions 18.x, 19.1.x, 19.2.x 19.3.x, 19.4, and 19.4.0.1 contain an Improper Certificate Validation vulnerability in the client (… Emc Networker 19.4.0.2+ Fix from $1,6002021-06-08 HIGH 8.8 CVE-2021-21549 Dell EMC XtremIO Versions prior to 6.3.3-8, contain a Cross-Site Request Forgery Vulnerability in XMS. A non-privileged attacker could potentially ex… Xtremio Management Server 6.3.3-8+ Fix from $1,9502021-05-21 CRITICAL 9.8 CVE-2021-21505 Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticat… Emc Integrated System For Microsoft Azure Stack Hub Firmware after 2011 Fix from $2,3002021-05-06 MEDIUM 6.7 CVE-2021-21527 Dell PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability may … Emc Powerscale Onefs Mitigation only Fix from $1,6002021-05-06 MEDIUM 6.7 CVE-2021-21550 Dell EMC PowerScale OneFS 8.1.0-9.1.0 contain an improper neutralization of special elements used in an OS command vulnerability. This vulnerability … Emc Powerscale Onefs Mitigation only Fix from $1,6002021-05-06 HIGH 7.8 CVE-2021-21551 KEVEPSS 53% Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or in… Dbutil after 2.3 Fix from $1,9502021-05-04 CRITICAL 9.8 CVE-2021-21507 Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain… X1008p Firmware 2.0.0.82 / 3.0.1.8+ Fix from $2,3002021-04-30 HIGH 8.8 CVE-2021-21530 Dell OpenManage Enterprise-Modular (OME-M) versions prior to 1.30.00 contain a security bypass vulnerability. An authenticated malicious user with lo… Openmanage Enterprise Modular 1.30.00+ Fix from $1,9502021-04-30 HIGH 8.1 CVE-2021-21540 Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit … Idrac9 Firmware 4.40.00.00+ Fix from $1,9502021-04-30 HIGH 7.8 CVE-2021-21531 Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. A local authenticated malicious user with monito… Solutions Enabler 9.1.0.15 / 9.1.0.26+ Fix from $1,9502021-04-30 HIGH 7.1 CVE-2021-21539 Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attack… Idrac9 Firmware 4.40.00.00+ Fix from $1,9502021-04-30 MEDIUM 6.7 CVE-2021-21547 Dell EMC Unity, UnityVSA, and Unity XT versions prior to 5.0.7.0.5.008 contain a plain-text password storage vulnerability when the Dell Upgrade Read… Unity Operating Environment 5.0.7.0.5.008+ Fix from $1,6002021-04-30 MEDIUM 6.1 CVE-2021-21541 Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentia… Idrac9 Firmware 4.40.00.00+ Fix from $1,6002021-04-30 HIGH 7.8 CVE-2021-21535 Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A local unauthenticated attacker may… Hybrid Client 1.5+ Fix from $1,9502021-04-30 MEDIUM 5.5 CVE-2021-21536 Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerabili… Hybrid Client 1.5+ Fix from $1,6002021-04-30 MEDIUM 5.5 CVE-2021-21537 Dell Hybrid Client versions prior to 1.5 contain an information exposure vulnerability. A local unauthenticated attacker may exploit this vulnerabili… Hybrid Client 1.5+ Fix from $1,6002021-04-30 CRITICAL 9.1 CVE-2020-26197 Dell PowerScale OneFS 8.1.0 - 9.1.0 contains an LDAP Provider inability to connect over TLSv1.2 vulnerability. It may make it easier to eavesdrop and… Emc Powerscale Onefs Mitigation only Fix from $2,3002021-04-20 MEDIUM 6.7 CVE-2021-21526 Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary comman… Powerscale Onefs after 9.1.0 Fix from $1,6002021-04-20 CRITICAL 9.8 CVE-2021-21524 Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticate… Storage Monitoring And Reporting 4.5.0.1+ Fix from $2,3002021-04-12 HIGH 7.8 CVE-2021-21545 Dell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation vulnerability that could be potentially exploited to g… Peripheral Manager 1.3.1+ Fix from $1,9502021-04-12 MEDIUM 6.3 CVE-2021-21532 Dell Wyse ThinOS 8.6 MR9 contains remediation for an improper management server validation vulnerability that could be potentially exploited to redir… Wyse Thinos 8.6+ Fix from $1,6002021-04-02 MEDIUM 5.5 CVE-2021-21529 Dell System Update (DSU) 1.9 and earlier versions contain a denial of service vulnerability. A local authenticated malicious user with low privileges… System Update 1.9+ Fix from $1,6002021-04-02 HIGH 7.8 CVE-2021-21518 Dell SupportAssist Client for Consumer PCs versions 3.7.x, 3.6.x, 3.4.x, 3.3.x, Dell SupportAssist Client for Business PCs versions 2.0.x, 2.1.x, 2.2… Supportassist Client Promanage Mitigation only Fix from $1,9502021-03-12 MEDIUM 6.1 CVE-2021-21510 Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit th… Idrac8 Firmware 2.75.100.75+ Fix from $1,6002021-03-08 HIGH 8.8 CVE-2021-21506 PowerScale OneFS 8.1.2,8.2.2 and 9.1.0 contains an improper input sanitization issue in its API handler. An un-authtenticated with ISI_PRIV_SYS_SUPPO… Emc Powerscale Onefs Mitigation only Fix from $1,9502021-03-08