Vulnerability in Dell EMC Unisphere For Powermax
CVE-2021-21548
Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.
Vulnerability class: Improper Certificate Validation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.4 (High). Vector: CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.003 (20.4th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 20th percentile — 20.4% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.003 · change: 0.000
Affected products
- Dell EMC Unisphere For Powermax
- Dell EMC Unisphere For Powermax Virtual Appliance
- Dell Powermax OS — versions 5978
- Dell Unisphere For Powermax, EMC Powermax Virtual Appliance , OS — versions Versions before 9.1.0.27, 5978
Weakness classification (CWE)
References
- www.dell.com/support/kbdoc/en-uk/000189606/dsa-2021-134-dell-emc-unisphere-for-… (vendor-advisory, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-21548?
- CVE-2021-21548 is a high-severity vulnerability in Dell EMC Unisphere For Powermax, classified under Improper Certificate Validation. CVSS score: 7.4/10. Published 2023-03-17.
- How severe is CVE-2021-21548?
- High severity. CVSS v3 base score is 7.4 out of 10.