Authentication Bypass in Dell Networking X-Series Firmware
CVE-2021-36320
7.5HIGH
Summary
The Dell Networking X-Series firmware versions before 3.0.1.8 are susceptible to an authentication bypass vulnerability. This flaw allows remote, unauthenticated attackers to potentially hijack user sessions by forging session IDs, thus gaining unauthorized access to the web server. Ensuring that networks using affected firmware versions are updated is crucial to maintaining their security and preventing potential exploitation.
Affected Version(s)
Networking X-Series < 3.0.1.9
References
CVSS V3.1
Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved