CVE-2021-21600

MEDIUM

6.5

Description

Dell EMC NetWorker, 19.4 or older, contain an uncontrolled resource consumption flaw in its API service. An authorized API user could potentially exploit this vulnerability via the web and desktop user interfaces, leading to denial of service in the manageability path.

CVE Details

CVSS v3.1 Score6.5

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredLOW

User InteractionNONE

Published8/10/2021

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

dell:emc_networker

Weaknesses (CWE)

CWE-772

References

https://www.dell.com/support/kbdoc/000189694(security_alert@emc.com)

https://www.dell.com/support/kbdoc/000189694(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.