Auth bypass in Dell Emc_networker
CVE-2021-36311
Dell EMC Networker versions prior to 19.5 contain an Improper Authorization vulnerability. Any local malicious user with networker user privileges may exploit this vulnerability to upload malicious file to unauthorized locations and execut…
EPSS: 0.002 (9.4th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 6.0 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:H/A:N.
Affected products
- Dell Emc_networker
- Dell Networker — versions unspecified
Weakness classification (CWE)
References
- security_alert@emc.com (Patch, x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2021-36311?
- CVE-2021-36311 is a medium-severity vulnerability in Dell Emc_networker, classified under Improper Authorization. CVSS score: 6.0/10. Published 2021-11-23.
- How severe is CVE-2021-36311?
- Medium severity. CVSS v3 base score is 6.0 out of 10.