CVE-2021-21524
Critical
Description
Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may lead to system compromise by unauthenticated attackers.
SeverityCritical
CVSS9.8
Exploit probability—
ProductDell Storage Monitoring And Reporting
PublishedApr 12, 2021
First seenApr 12, 2021
Weakness typeCWE-502Deserialization of untrusted data
How to fix
Update
- dell storage_monitoring_and_reporting4.5.0.1 or later
- dell storage_resource_manager4.5.0.1 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell storage_monitoring_and_reporting | v < 4.5.0.1 | 4.5.0.1 |
| dell storage_resource_manager | v < 4.5.0.1 | 4.5.0.1 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.