CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21595

Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability could allow the compadmin user to elevate privileges. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell recommends to update/upgrade at the earliest opportunity.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 40.9%

CVSS Severity

CVSS v3 Score 6.0

CVSS v2 Score 4.6

References

Products affected by CVE-2021-21595

Dell » Emc Powerscale Onefs » Version: 8.2.2

cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2
Dell » Emc Powerscale Onefs » Version: 9.0.0.0

cpe:2.3:o:dell:emc_powerscale_onefs:9.0.0.0
Dell » Emc Powerscale Onefs » Version: 9.1.0

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0
Dell » Emc Powerscale Onefs » Version: 9.1.0.0

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.0
Dell » Emc Powerscale Onefs » Version: 9.1.0.21

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.21
Dell » Emc Powerscale Onefs » Version: 9.1.0.24

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.24
Dell » Emc Powerscale Onefs » Version: 9.1.0.25

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.25
Dell » Emc Powerscale Onefs » Version: 9.1.0.26

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.26
Dell » Emc Powerscale Onefs » Version: 9.1.0.27

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.0.27
Dell » Emc Powerscale Onefs » Version: 9.1.1.0

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.1.0
Dell » Emc Powerscale Onefs » Version: 9.1.1.1

cpe:2.3:o:dell:emc_powerscale_onefs:9.1.1.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2021-21595

Products

Pricing

Contact Us