by Kastro
Paper/Archive/CVE-2021-21524

CVE-2021-21524

Dell Dell EMC Storage Monitoring and Reporting — Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability.

EPSS 3%CVSS 9.8
critical.is priorityof 100
47
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 88.3.883 × 2017.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may lead to system compromise by unauthenticated attackers.

Affected

ProductAffectedFixed inSource
Dell EMC Storage Monitoring and Reportingunspecified – < 4.5.0.14.5.0.1CNA

Scores by source

dell (CNA)9.8CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refdell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities