FKIE_CVE-2021-36315

Vulnerability from fkie_nvd - Published: 2021-11-12 23:15 - Updated: 2024-11-21 06:13
Severity ?
6.8 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
6.8 (Medium) - CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity.
References
security_alert@emc.comhttps://www.dell.com/support/kbdoc/en-us/000193005/Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.dell.com/support/kbdoc/en-us/000193005/Vendor Advisory
Impacted products
Vendor Product Version
dell emc_powerscale_nodes_a100_firmware -
dell emc_powerscale_nodes_a100 -
dell emc_powerscale_nodes_s210_firmware -
dell emc_powerscale_nodes_s210 -
dell emc_powerscale_nodes_x410_firmware -
dell emc_powerscale_nodes_x410 -
dell emc_powerscale_nodes_h400_firmware -
dell emc_powerscale_nodes_h400 -
dell emc_powerscale_nodes_x210_firmware -
dell emc_powerscale_nodes_x210 -
dell emc_powerscale_nodes_nl410_firmware -
dell emc_powerscale_nodes_nl410 -
dell emc_powerscale_nodes_a200_firmware -
dell emc_powerscale_nodes_a200 -
dell emc_powerscale_nodes_a2000_firmware -
dell emc_powerscale_nodes_a2000 -
dell emc_powerscale_nodes_h400_firmware -
dell emc_powerscale_nodes_h400 -
dell emc_powerscale_nodes_h500_firmware -
dell emc_powerscale_nodes_h500 -
dell emc_powerscale_nodes_h600_firmware -
dell emc_powerscale_nodes_h600 -
dell emc_powerscale_nodes_h5600_firmware -
dell emc_powerscale_nodes_h5600 -
dell emc_powerscale_nodes_f800_firmware -
dell emc_powerscale_nodes_f800 -
dell emc_powerscale_nodes_f810_firmware -
dell emc_powerscale_nodes_f810 -
dell emc_powerscale_nodes_f200_firmware -
dell emc_powerscale_nodes_f200 -
dell emc_powerscale_nodes_f600_firmware -
dell emc_powerscale_nodes_f600 -
dell emc_powerscale_nodes_a300_firmware -
dell emc_powerscale_nodes_a300 -
dell emc_powerscale_nodes_a3000_firmware -
dell emc_powerscale_nodes_a3000 -
dell emc_powerscale_nodes_h700_firmware -
dell emc_powerscale_nodes_h700 -
dell emc_powerscale_nodes_h7000_firmware -
dell emc_powerscale_nodes_h7000 -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_a100_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "21C5FDA5-8A1A-49F7-86DB-92C377BCE517",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_a100:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "5B9FD630-B932-4C88-B57A-E0372FDC141E",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_s210_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E0D1C67F-337A-48AA-9E7E-B53753FA3FCB",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_s210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "05A5148C-752E-4B27-9D61-2ABE703D9EDA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_x410_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "13F16E66-3EAC-4815-BE53-9BF116F414F2",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_x410:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8FEC2AA3-DA7A-474C-8C81-1FE055A1B262",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AA427A5-E327-47FC-8A4C-E190A74F5F5B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FDEDB8D-256E-49CB-BAD9-EA870A138E47",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_x210_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "7429AEBB-1610-4AF3-B843-182B8A01A26A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_x210:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ED1CA9A8-B3CE-47FB-BBEC-7093A57DB891",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_nl410_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1190C465-423C-4F58-8E83-6E5067340A9A",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_nl410:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "0E7E3E6E-22BD-45BD-A6B8-97F593F6194D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_a200_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4517B78F-AC04-49DC-A628-D7E8F9CA71A8",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_a200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F498B8E-E894-4CAC-8FCF-1F6B7107658B",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_a2000_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4CEDDB11-CF17-4E30-AB27-FC833851FB09",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_a2000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4A65586F-28DD-49DB-94B6-A658819477AA",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8AA427A5-E327-47FC-8A4C-E190A74F5F5B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "4FDEDB8D-256E-49CB-BAD9-EA870A138E47",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h500_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D050CCAF-C61B-44B4-9903-B3DE04E16387",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h500:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "ADD86EA9-09BA-40C8-B525-2BD76851D5B2",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h600_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "06C112C5-928F-4226-B024-F14601D373B5",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "F6F9B6CA-A44E-4C78-9524-E41F3418B008",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h5600_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "FCCB1734-C678-4699-8D26-CA79A5D0265E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h5600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A05C1BE7-182D-4FF2-B1B0-F90426BEC9C0",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_f800_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "47007C7F-E08B-4E7A-B7FF-2DAF6151601E",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_f800:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "D922D690-884F-472E-BAEB-83805D5D4F3D",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_f810_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8E8E950C-E010-489C-85EB-E7291FAA4984",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_f810:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B9519D9F-3E8C-459F-A164-DFFA95C22593",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_f200_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "995F7E93-9BBC-4FCE-A7A6-0AEF1B15B0D4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_f200:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "A04EF3DE-2B8F-460B-88A7-47C910D77C80",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_f600_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "1F63E49F-668A-4479-8F1C-B46CE22E00E3",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_f600:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "15E2204C-44B2-42F4-9C79-4733B84E55DE",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_a300_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "B34C41C6-DCFE-406F-939E-2C548340F4E4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_a300:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "E5A44AA1-22A7-4FC6-BD39-626E54701850",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_a3000_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "EA1FB2F3-8292-42C4-875A-02A383282CB1",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_a3000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "6588B385-C64A-4CDF-9612-7E3C7395B9E7",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h700_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "67A573B6-DD7C-4D6C-AB28-61AB9AFD488C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h700:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "42FA4E6E-5BA9-442D-925C-42B8032D4ECF",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    },
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:dell:emc_powerscale_nodes_h7000_firmware:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "41B5A14E-B069-4333-A91A-9E23F91E11EF",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:dell:emc_powerscale_nodes_h7000:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "3B215575-1E42-4C1C-A63E-D68656E737B5",
              "vulnerable": false
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity."
    },
    {
      "lang": "es",
      "value": "Dell EMC PowerScale Nodes contiene un defecto de dise\u00f1o de hardware. Esto puede permitir a un usuario local no autenticado escalar privilegios. Esto tambi\u00e9n afecta al modo Compliance y, para los cl\u00fasteres en modo Compliance, es una vulnerabilidad cr\u00edtica. Dell EMC recomienda aplicar la soluci\u00f3n lo antes posible"
    }
  ],
  "id": "CVE-2021-36315",
  "lastModified": "2024-11-21T06:13:28.913",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "LOCAL",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 7.2,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 5.9,
        "source": "security_alert@emc.com",
        "type": "Secondary"
      },
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "PHYSICAL",
          "availabilityImpact": "HIGH",
          "baseScore": 6.8,
          "baseSeverity": "MEDIUM",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 0.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2021-11-12T23:15:08.367",
  "references": [
    {
      "source": "security_alert@emc.com",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.dell.com/support/kbdoc/en-us/000193005/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "https://www.dell.com/support/kbdoc/en-us/000193005/"
    }
  ],
  "sourceIdentifier": "security_alert@emc.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.