Authentication Bypass in Dell Networking X-Series Firmware
CVE-2021-36320

7.5HIGH

Key Information:

Vendor

Dell
Status
Networking X-series
Vendor
CVE Published:
20 November 2021

What is CVE-2021-36320?

The Dell Networking X-Series firmware versions before 3.0.1.8 are susceptible to an authentication bypass vulnerability. This flaw allows remote, unauthenticated attackers to potentially hijack user sessions by forging session IDs, thus gaining unauthorized access to the web server. Ensuring that networks using affected firmware versions are updated is crucial to maintaining their security and preventing potential exploitation.

Affected Version(s)

Networking X-Series < 3.0.1.9

References

https://www.dell.com/support/kbdoc/en-us/000193230/dsa-20...
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.