CVE-2021-21548

High

Description

Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.

SeverityHigh

CVSS7.4

Exploit probability—

ProductDell Powermax Os

PublishedMar 17, 2023

First seenMar 17, 2023

Weakness typeCWE-295CWE-295

How to fix

Update

dell emc_unisphere_for_powermax9.1.0.27 or later
dell emc_unisphere_for_powermax_virtual_appliance9.1.0.27 or later

Vendor advisories

dell.com/support/kbdoc/en-uk/000189606/dsa-2021-134-dell-emc-unisphere-for-powermax-dell-emc-unisphere-for-powermax-virtual-appliance-dell-emc-solutions-enabler-virtual-appliance-and-dell-emc-powermax-embedded-management-security-update-for-multiple-third-party-component-vulnerabilities

Affected products

Product	Affected versions	Fixed in
dell powermax_os	5978	—
dell emc_unisphere_for_powermax	v < 9.1.0.27	9.1.0.27
dell emc_unisphere_for_powermax_virtual_appliance	v < 9.1.0.27	9.1.0.27

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.