DSA-2021-017: Dell Networking Security Update for a Weak Password Encryption Vulnerability

Riepilogo: Dell Networking X-Series remediation is available for a weak password encryption vulnerability that may be exploited by malicious users to compromise the affected system.

Questo articolo si applica a Questo articolo non si applica a Questo articolo non è legato a un prodotto specifico. Non tutte le versioni del prodotto sono identificate in questo articolo.
Scopri le altre risorse

Impatto

High

Dettagli

Proprietary Code CVE Description CVSS Base Score CVSS Vector String
CVE-2021-21507 Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. 8.8 CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

For information regarding the VRTX remediation, see KB article 185252: DSA-2020-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Proprietary Code CVE Description CVSS Base Score CVSS Vector String
CVE-2021-21507 Dell Networking X-Series firmware versions prior to 3.0.1.8 and Dell PowerEdge VRTX firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account. 8.8 CVSS:3.1(AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)

For information regarding the VRTX remediation, see KB article 185252: DSA-2020-080: Dell PowerEdge VRTX Security Update for a Weak Password Encryption Vulnerability
Dell Technologies raccomanda a tutti i clienti di prendere in considerazione sia il punteggio base CVSS, sia ogni eventuale punteggio temporale o ambientale che possa avere effetti sul livello di gravità potenziale associato a una specifica vulnerabilità di sicurezza.

Prodotti interessati e correzione

CVE Addressed Product Affected Version Updated Version Link to Update
CVE-2021-21507 Dell Networking X-Series firmware Versions prior to 3.0.1.2
 		 3.0.1.8 Link to X1000 Update
Link to X4012 Update
CVE Addressed Product Affected Version Updated Version Link to Update
CVE-2021-21507 Dell Networking X-Series firmware Versions prior to 3.0.1.2
 		 3.0.1.8 Link to X1000 Update
Link to X4012 Update

Cronologia delle revisioni

RevisionDateDescription
1.02021-04-14Initial Release
1.12021-06-09Acknowledgement Update

Ringraziamenti

Dell Technologies would like to thank Ken Pyle for his contributions.

Informazioni correlate

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Dichiarazione di non responsabilità

Prodotti interessati

X Series

Prodotti

Networking, Product Security Information
Proprietà dell'articolo
Numero articolo: 000185250
Tipo di articolo: Dell Security Advisory
Ultima modifica: 18 set 2025
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.