DSA-2021-172: Dell Isilon InsightIQ Security Update for a Proprietary Component Vulnerability

Resumen: Dell Isilon InsightIQ remediation is available for Proprietary Component that could be exploited by malicious users to compromise the affected systems.

Este artículo se aplica a: Este artículo no se aplica a: Este artículo no está vinculado a ningún producto específico. En este artículo no se identifican todas las versiones de los productos.

Impacto

High

Detalles

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-36298 Dell Isilon InsightIQ, versions prior to 4.1.4, contain Risky Cryptographic Algorithm in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; Dell recommends customers to upgrade at the earliest opportunity. 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-36298 Dell Isilon InsightIQ, versions prior to 4.1.4, contain Risky Cryptographic Algorithm in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; Dell recommends customers to upgrade at the earliest opportunity. 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Dell Technologies recomienda que todos los clientes tengan en cuenta la puntuación base CVSS y las puntuaciones temporales o de entorno relevantes que puedan afectar a la posible gravedad asociada a una determinada vulnerabilidad de seguridad.

Productos afectados y corrección

CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2021-36298 Isilon InsightIQ 4.1.3.88 4.1.4.57
 
https://www.dell.com/support/home/en-in/product-support/product/isilon-insightiq/drivers
Select Version 4.1.4 and Package based on requirement.
  1. Isilon InsightIQ 4.1.4 Installation File for Linux Computers
  2. Isilon InsightIQ 4.1.4 Installation File for Other Supported VMware Products
  3. Isilon InsightIQ 4.1.4 Installation File for VMware ESX, VMware ESXi, or VMware Workstation
  4. Isilon InsightIQ 4.1.4 Patch file for Linux computers
CVE(s) Addressed Product Affected Version(s) Updated Version(s) Link to Update
CVE-2021-36298 Isilon InsightIQ 4.1.3.88 4.1.4.57
 
https://www.dell.com/support/home/en-in/product-support/product/isilon-insightiq/drivers
Select Version 4.1.4 and Package based on requirement.
  1. Isilon InsightIQ 4.1.4 Installation File for Linux Computers
  2. Isilon InsightIQ 4.1.4 Installation File for Other Supported VMware Products
  3. Isilon InsightIQ 4.1.4 Installation File for VMware ESX, VMware ESXi, or VMware Workstation
  4. Isilon InsightIQ 4.1.4 Patch file for Linux computers

Soluciones alternativas y mitigaciones

None

Historial de revisiones

RevisionDateDescription
0.12021-09-17Initial Release.

Información relacionada

Productos afectados

Product Security Information
Propiedades del artículo
Número de artículo: 000191604
Tipo de artículo: Dell Security Advisory
Última modificación: 18 sept 2025
Encuentra las respuestas que necesitas con la ayuda de otros usuarios de Dell
Servicios de asistencia
Comprueba si tu dispositivo está cubierto por los servicios de asistencia.