CVE-2021-36322
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
46.8%
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| dell | x1008p_firmware | * | cpe:2.3:o:dell:x1008p_firmware:*:*:*:*:*:*:*:* |
| dell | x1008p | - | cpe:2.3:h:dell:x1008p:-:*:*:*:*:*:*:* |
| dell | x1018p_firmware | * | cpe:2.3:o:dell:x1018p_firmware:*:*:*:*:*:*:*:* |
| dell | x1018p | - | cpe:2.3:h:dell:x1018p:-:*:*:*:*:*:*:* |
| dell | x1026p_firmware | * | cpe:2.3:o:dell:x1026p_firmware:*:*:*:*:*:*:*:* |
| dell | x1026p | - | cpe:2.3:h:dell:x1026p:-:*:*:*:*:*:*:* |
| dell | x1052p_firmware | * | cpe:2.3:o:dell:x1052p_firmware:*:*:*:*:*:*:*:* |
| dell | x1052p | - | cpe:2.3:h:dell:x1052p:-:*:*:*:*:*:*:* |
| dell | x4012_firmware | * | cpe:2.3:o:dell:x4012_firmware:*:*:*:*:*:*:*:* |
| dell | x4012 | - | cpe:2.3:h:dell:x4012:-:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
EPSS
Percentile
46.8%