CVE-2021-36320
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an authentication bypass vulnerability. A remote unauthenticated attacker may potentially hijack a session and access the webserver by forging the session ID.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - security_alert@emc.com
- Published
- 2021-11-20
- Last modified
- 2024-09-16
- Weaknesses
- CWE-331
Affected products
- Networking X-series (Dell)
- X1008 Firmware (Dell)
- X1008p Firmware (Dell)
- X1018 Firmware (Dell)
- X1018p Firmware (Dell)
- X1026 Firmware (Dell)
- X1026p Firmware (Dell)
- X1052 Firmware (Dell)
- X1052p Firmware (Dell)
- X4012 Firmware (Dell)
References
- https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-s…
