Auth bypass in Dell Networker
CVE-2021-36311
Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execut…
EPSS: 0.000 (11.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N.
Affected products
- Dell Networker — versions unspecified
Weakness classification (CWE)
References
- www.dell.com/support/kbdoc/000192419 (x_refsource_MISC)
Frequently asked questions
- What is CVE-2021-36311?
- CVE-2021-36311 is a medium-severity vulnerability in Dell Networker, classified under Improper Authorization. CVSS score: 6.0/10. Published 2021-11-23.
- How severe is CVE-2021-36311?
- Medium severity. CVSS v3 base score is 6.0 out of 10.