CVE-2021-36315

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2021-36315
Dell EMC PowerScale Nodes contain a hardware design flaw. This may allow a local unauthenticated user to escalate privileges. This also affects Compliance mode and for Compliance mode clusters, is a critical vulnerability. Dell EMC recommends applying the workaround at your earliest opportunity.

6.8 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 5.9

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

7.2 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 3.9 / Impact : 10.0

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000193005/ Vendor Advisory
https://www.dell.com/support/kbdoc/en-us/000193005/ Vendor Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_a100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a100:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_s210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_s210:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_x410_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_x410:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_x210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_x210:-:*:*:*:*:*:*:*

Configuration 6 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_nl410_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_nl410:-:*:*:*:*:*:*:*

Configuration 7 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_a200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a200:-:*:*:*:*:*:*:*

Configuration 8 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_a2000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a2000:-:*:*:*:*:*:*:*

Configuration 9 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:*:*:*:*:*:*:*

Configuration 10 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h500:-:*:*:*:*:*:*:*

Configuration 11 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h600:-:*:*:*:*:*:*:*

Configuration 12 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h5600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h5600:-:*:*:*:*:*:*:*

Configuration 13 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_f800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f800:-:*:*:*:*:*:*:*

Configuration 14 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_f810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f810:-:*:*:*:*:*:*:*

Configuration 15 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_f200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f200:-:*:*:*:*:*:*:*

Configuration 16 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_f600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f600:-:*:*:*:*:*:*:*

Configuration 17 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_a300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a300:-:*:*:*:*:*:*:*

Configuration 18 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_a3000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a3000:-:*:*:*:*:*:*:*

Configuration 19 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h700:-:*:*:*:*:*:*:*

Configuration 20 (hide)

AND
cpe:2.3:o:dell:emc_powerscale_nodes_h7000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h7000:-:*:*:*:*:*:*:*
History

21 Nov 2024, 06:13

Type Values Removed Values Added
References () https://www.dell.com/support/kbdoc/en-us/000193005/ - Vendor Advisory () https://www.dell.com/support/kbdoc/en-us/000193005/ - Vendor Advisory

12 Jul 2022, 17:42

Type Values Removed Values Added
CWE CWE-269 NVD-CWE-noinfo

17 Nov 2021, 19:44

Type Values Removed Values Added
References (MISC) https://www.dell.com/support/kbdoc/en-us/000193005/ - (MISC) https://www.dell.com/support/kbdoc/en-us/000193005/ - Vendor Advisory
CVSS v2 : unknown
v3 : unknown 		v2 : 7.2
v3 : 6.8
CPE cpe:2.3:h:dell:emc_powerscale_nodes_f600:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_a3000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_f810_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h5600:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_h7000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_nl410:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_a200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h600:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_a300_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a300:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_h5600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a3000:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_h700_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_f200_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_f600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_s210:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f800:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_h400_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h400:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h500:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_x210:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_s210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_x410:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_f800_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a200:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a2000:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_a2000_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_x410_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f810:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_x210_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_h500_firmware:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_nl410_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_f200:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_h600_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h700:-:*:*:*:*:*:*:*
cpe:2.3:o:dell:emc_powerscale_nodes_a100_firmware:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_h7000:-:*:*:*:*:*:*:*
cpe:2.3:h:dell:emc_powerscale_nodes_a100:-:*:*:*:*:*:*:*
CWE CWE-269

12 Nov 2021, 23:15

Type Values Removed Values Added
New CVE
Information

Published : 2021-11-12 23:15

Updated : 2024-11-21 06:13

NVD link : CVE-2021-36315

Mitre link : CVE-2021-36315

CVE.ORG link : CVE-2021-36315

JSON object : View

Products Affected

dell

  • emc_powerscale_nodes_x210_firmware
  • emc_powerscale_nodes_nl410_firmware
  • emc_powerscale_nodes_h5600
  • emc_powerscale_nodes_x410
  • emc_powerscale_nodes_f810_firmware
  • emc_powerscale_nodes_a200_firmware
  • emc_powerscale_nodes_h500_firmware
  • emc_powerscale_nodes_a200
  • emc_powerscale_nodes_nl410
  • emc_powerscale_nodes_h7000_firmware
  • emc_powerscale_nodes_f810
  • emc_powerscale_nodes_s210_firmware
  • emc_powerscale_nodes_a2000
  • emc_powerscale_nodes_f600_firmware
  • emc_powerscale_nodes_h500
  • emc_powerscale_nodes_h7000
  • emc_powerscale_nodes_f200_firmware
  • emc_powerscale_nodes_h700
  • emc_powerscale_nodes_h600
  • emc_powerscale_nodes_a100_firmware
  • emc_powerscale_nodes_s210
  • emc_powerscale_nodes_a3000_firmware
  • emc_powerscale_nodes_h700_firmware
  • emc_powerscale_nodes_a100
  • emc_powerscale_nodes_x210
  • emc_powerscale_nodes_a300
  • emc_powerscale_nodes_a3000
  • emc_powerscale_nodes_h5600_firmware
  • emc_powerscale_nodes_h400
  • emc_powerscale_nodes_x410_firmware
  • emc_powerscale_nodes_a2000_firmware
  • emc_powerscale_nodes_f800_firmware
  • emc_powerscale_nodes_f800
  • emc_powerscale_nodes_f200
  • emc_powerscale_nodes_h400_firmware
  • emc_powerscale_nodes_f600
  • emc_powerscale_nodes_a300_firmware
  • emc_powerscale_nodes_h600_firmware
CWE
NVD-CWE-noinfo