CVE-2021-36293 | CVE Tracker

Description

Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin may potentially exploit vulnerability and gain elevated privileges.

Scores

CVSS scores of CVE-2021-36293, by who scored it
Scored by	CVSS	Score	Vector
dellCNA (assigner)	3.1	Medium6.4	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
NVDNVD · Modified	3.1	Medium6.7	CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS (exploitation in 30 days): 0.20% · top 90% of all CVEs (6 Nov 2026)

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.4.

Weakness

CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (opens in a new tab)All about CWE-78 and its CVEs
CWE-269 (opens in a new tab)All about CWE-269 and its CVEs

Affected products

Dell · VNX2
- affected unspecified – < Version 8.1.21.303 (file) Version 5.33.021.5.303 (block)

References (1)

https://www.dell.com/support/kbdoc/en-us/000191155/dsa-2021-164-dell-vnx2-control-station-security-update-for-multiple-vulnerabilities (opens in a new tab)x_refsource_MISCx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

Badge for a README or a ticket

[![CVE-2021-36293](https://trackcve.app/badge/CVE-2021-36293.svg)](https://trackcve.app/cve/CVE-2021-36293)

Record last updated 17 Sept 2024, 01:10 UTC.

Dell VNX2 for File version 8.1.21.266 and earlier, contain a privilege escalation vulnerability. A local malicious admin may potentially…