CVE-2021-21507
High
Description
Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.
SeverityHigh
CVSS8.8
Exploit probability—
ProductDell X1008p Firmware
PublishedApr 30, 2021
First seenApr 30, 2021
Weakness typeCWE-261CWE-261
How to fix
Update
- dell x1008p_firmware3.0.1.8 or later
- dell x1018p_firmware3.0.1.8 or later
- dell x1026p_firmware3.0.1.8 or later
- dell x1052p_firmware3.0.1.8 or later
- dell x4012_firmware3.0.1.8 or later
- dell r1-2401_firmware2.0.0.82 or later
- dell r1-2210_firmware2.0.0.82 or later
- dell x1008_firmware3.0.1.8 or later
- dell x1018_firmware3.0.1.8 or later
- dell x1026_firmware3.0.1.8 or later
- dell x1052_firmware3.0.1.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell x1008p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1018p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1026p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1052p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x4012_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell r1-2401_firmware | v < 2.0.0.82 | 2.0.0.82 |
| dell r1-2210_firmware | v < 2.0.0.82 | 2.0.0.82 |
| dell x1008_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1018_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1026_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1052_firmware | v < 3.0.1.8 | 3.0.1.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.