CVE-2021-21596 CRITICAL

CVE-2021-21596

Vendor Dell
Product Dell OpenManage Enterprise
Weakness CWE-200 · Info exposure
Published August 9, 2021
Last update September 17, 2024
View on NVD All CVEs

CVSS base score

9.6/10
Attack vector Adjacent
Attack complexity Low
Privileges required None
User interaction None
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution vulnerability. A malicious attacker with access to the immediate subnet may potentially exploit this vulnerability leading to information disclosure and a possible elevation of privileges.

Key dates

02Disclosure timeline

August 9, 2021 CVE published
September 17, 2024 Record updated