CVE-2021-36302

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 09-02-2022 09:15

Last modified: - 14-02-2022 08:28

Total changes: - 3

Description

All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privileges and take over the system.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Low

Privileges required

Changed

Scope

None

User interaction

9.9

Base score

3.1

6.0

Exploitability score

Impact score

Verification logic

AND

vendor=dell AND product=emc_integrated_system_for_microsoft_azure_stack_hub_firmware AND versionEndIncluding=2204

vendor=dell AND product=emc_integrated_system_for_microsoft_azure_stack_hub AND version=-

Reference

N/A-Mitigation, Vendor Advisory

Keywords

CVE-2021-36302

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2021-36302

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures