CVE-2021-36307 in Networking OS10

Sumário

de MITRE • 20/11/2021

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsável: Dell
• Reservar: 08/07/2021
• Divulgação: 20/11/2021
• Moderação: aceite
• Entrada: VDB-187064
• CPE: pronto
• CWE: CWE-269 (confirmado)
• CVSS: 8.5 (NVD)
• EPSS: 0.00875
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2021-36307
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2021-36307
• CVE Details: https://www.cvedetails.com/cve/CVE-2021-36307/