CVE-2021-36321
High
Description
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain an improper input validation vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by sending specially crafted data to trigger a denial of service.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDell X1008p Firmware
PublishedNov 20, 2021
First seenNov 20, 2021
Weakness typeCWE-20Improper input validation
How to fix
Update
- dell x1008p_firmware3.0.1.8 or later
- dell x1018p_firmware3.0.1.8 or later
- dell x1026p_firmware3.0.1.8 or later
- dell x1052p_firmware3.0.1.8 or later
- dell x4012_firmware3.0.1.8 or later
- dell x1008_firmware3.0.1.8 or later
- dell x1018_firmware3.0.1.8 or later
- dell x1026_firmware3.0.1.8 or later
- dell x1052_firmware3.0.1.8 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell x1008p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1018p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1026p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1052p_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x4012_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1008_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1018_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1026_firmware | v < 3.0.1.8 | 3.0.1.8 |
| dell x1052_firmware | v < 3.0.1.8 | 3.0.1.8 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.