Lucene search

[email protected]NVD:CVE-2021-36315

HistoryNov 12, 2021 - 11:15 p.m.

CVE-2021-36315

2021-11-1223:15:08

[email protected]

web.nvd.nist.gov

dell emc

powerscale nodes

hardware design flaw

local unauthenticated user

escalate privileges

compliance mode

critical vulnerability

workaround

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

29.9%

JSON

Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity.

Affected configurations

Nvd

Node

dellemc_powerscale_nodes_a100_firmwareMatch-

AND

dellemc_powerscale_nodes_a100Match-

Node

dellemc_powerscale_nodes_s210_firmwareMatch-

AND

dellemc_powerscale_nodes_s210Match-

Node

dellemc_powerscale_nodes_x410_firmwareMatch-

AND

dellemc_powerscale_nodes_x410Match-

Node

dellemc_powerscale_nodes_h400_firmwareMatch-

AND

dellemc_powerscale_nodes_h400Match-

Node

dellemc_powerscale_nodes_x210_firmwareMatch-

AND

dellemc_powerscale_nodes_x210Match-

Node

dellemc_powerscale_nodes_nl410_firmwareMatch-

AND

dellemc_powerscale_nodes_nl410Match-

Node

dellemc_powerscale_nodes_a200_firmwareMatch-

AND

dellemc_powerscale_nodes_a200Match-

Node

dellemc_powerscale_nodes_a2000_firmwareMatch-

AND

dellemc_powerscale_nodes_a2000Match-

Node

dellemc_powerscale_nodes_h400_firmwareMatch-

AND

dellemc_powerscale_nodes_h400Match-

Node

dellemc_powerscale_nodes_h500_firmwareMatch-

AND

dellemc_powerscale_nodes_h500Match-

Node

dellemc_powerscale_nodes_h600_firmwareMatch-

AND

dellemc_powerscale_nodes_h600Match-

Node

dellemc_powerscale_nodes_h5600_firmwareMatch-

AND

dellemc_powerscale_nodes_h5600Match-

Node

dellemc_powerscale_nodes_f800_firmwareMatch-

AND

dellemc_powerscale_nodes_f800Match-

Node

dellemc_powerscale_nodes_f810_firmwareMatch-

AND

dellemc_powerscale_nodes_f810Match-

Node

dellemc_powerscale_nodes_f200_firmwareMatch-

AND

dellemc_powerscale_nodes_f200Match-

Node

dellemc_powerscale_nodes_f600_firmwareMatch-

AND

dellemc_powerscale_nodes_f600Match-

Node

dellemc_powerscale_nodes_a300_firmwareMatch-

AND

dellemc_powerscale_nodes_a300Match-

Node

dellemc_powerscale_nodes_a3000_firmwareMatch-

AND

dellemc_powerscale_nodes_a3000Match-

Node

dellemc_powerscale_nodes_h700_firmwareMatch-

AND

dellemc_powerscale_nodes_h700Match-

Node

dellemc_powerscale_nodes_h7000_firmwareMatch-

AND

dellemc_powerscale_nodes_h7000Match-

VendorProductVersionCPE
dellemc_powerscale_nodes_a100_firmware-cpe:2.3:o:dell:emc_powerscale_nodes_a100_firmware:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_a100-cpe:2.3:h:dell:emc_powerscale_nodes_a100:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_s210_firmware-cpe:2.3:o:dell:emc_powerscale_nodes_s210_firmware:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_s210-cpe:2.3:h:dell:emc_powerscale_nodes_s210:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_x410_firmware-cpe:2.3:o:dell:emc_powerscale_nodes_x410_firmware:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_x410-cpe:2.3:h:dell:emc_powerscale_nodes_x410:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_h400_firmware-cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_h400-cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_x210_firmware-cpe:2.3:o:dell:emc_powerscale_nodes_x210_firmware:-:*:*:*:*:*:*:*
dellemc_powerscale_nodes_x210-cpe:2.3:h:dell:emc_powerscale_nodes_x210:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
dell	emc_powerscale_nodes_a100_firmware	-	cpe:2.3:o:dell:emc_powerscale_nodes_a100_firmware:-:::::::*
dell	emc_powerscale_nodes_a100	-	cpe:2.3:h:dell:emc_powerscale_nodes_a100:-:::::::*
dell	emc_powerscale_nodes_s210_firmware	-	cpe:2.3:o:dell:emc_powerscale_nodes_s210_firmware:-:::::::*
dell	emc_powerscale_nodes_s210	-	cpe:2.3:h:dell:emc_powerscale_nodes_s210:-:::::::*
dell	emc_powerscale_nodes_x410_firmware	-	cpe:2.3:o:dell:emc_powerscale_nodes_x410_firmware:-:::::::*
dell	emc_powerscale_nodes_x410	-	cpe:2.3:h:dell:emc_powerscale_nodes_x410:-:::::::*
dell	emc_powerscale_nodes_h400_firmware	-	cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:::::::*
dell	emc_powerscale_nodes_h400	-	cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:::::::*
dell	emc_powerscale_nodes_x210_firmware	-	cpe:2.3:o:dell:emc_powerscale_nodes_x210_firmware:-:::::::*
dell	emc_powerscale_nodes_x210	-	cpe:2.3:h:dell:emc_powerscale_nodes_x210:-:::::::*

Rows per page:

1-10 of 381

References

www.dell.com/support/kbdoc/en-us/000193005/

CVSS2

7.2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:L/AC:L/Au:N/C:C/I:C/A:C

CVSS3

6.8

Attack Vector

PHYSICAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

29.9%

JSON

Related for NVD:CVE-2021-36315

cve1 prion1 cvelist1