What is CVE-2021-21507?

CVE-2021-21507 is a high-severity vulnerability in Dell R1-2210, classified under Weak Encoding for Password. CVSS score: 8.8/10. Published 2021-04-30.

How severe is CVE-2021-21507?

High severity. CVSS v3 base score is 8.8 out of 10.

Vulnerability in Dell R1-2210

CVE-2021-21507

Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.

EPSS: 0.005 (43.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Dell R1-2210
Dell R1-2210_firmware
Dell R1-2401
Dell R1-2401_firmware
Dell Vrtx Switch Modules — versions unspecified
Dell X1008
Dell X1008_firmware
Dell X1008p
Dell X1008p_firmware
Dell X1018

Weakness classification (CWE)

References

security_alert@emc.com (Patch, x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-21507?: CVE-2021-21507 is a high-severity vulnerability in Dell R1-2210, classified under Weak Encoding for Password. CVSS score: 8.8/10. Published 2021-04-30.
How severe is CVE-2021-21507?: High severity. CVSS v3 base score is 8.8 out of 10.