Server Side Request Forgery Vulnerability in Dell EMC Data Protection Central
CVE-2021-36349

4.3MEDIUM

Key Information:

Vendor

Dell
Status
Data Protection Central
Vendor
CVE Published:
24 January 2022

What is CVE-2021-36349?

Dell EMC Data Protection Central versions 19.5 and earlier are susceptible to a Server Side Request Forgery (SSRF) vulnerability in the DNS client processing functionality. This flaw allows an attacker to send crafted requests that could enable port scanning of external hosts. If successfully exploited, a remote malicious user could leverage this vulnerability to gain unauthorized access to sensitive network information, thereby compromising the security of the affected system.

Affected Version(s)

Data Protection Central < 19.6

References

https://www.dell.com/support/kbdoc/000195103
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.