Sign-up

ID

VAR-202111-1434


CVE

CVE-2021-36312


TITLE

Dell EMC CloudLink  Vulnerability related to the use of hard-coded passwords in

Trust: 0.8

sources: JVNDB: JVNDB-2021-015359

DESCRIPTION

Dell EMC CloudLink 7.1 and all prior versions contain a Hard-coded Password Vulnerability. A remote high privileged attacker, with the knowledge of the hard-coded credentials, may potentially exploit this vulnerability to gain unauthorized access to the system. Dell EMC CloudLink contains a vulnerability related to the use of hardcoded passwords.Information is obtained, information is tampered with, and service operation is interrupted. (DoS) It may be in a state

Trust: 1.71

sources: NVD: CVE-2021-36312 // JVNDB: JVNDB-2021-015359 // VULHUB: VHN-398196

AFFECTED PRODUCTS

vendor:dellmodel:cloudlinkscope:ltversion:7.1.1

Trust: 1.0

vendor:デルmodel:cloudlinkscope:eqversion: -

Trust: 0.8

vendor:デルmodel:cloudlinkscope:lteversion:7.1 and earlier

Trust: 0.8

sources: JVNDB: JVNDB-2021-015359 // NVD: CVE-2021-36312

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2021-36312
value: CRITICAL

Trust: 1.0

security_alert@emc.com: CVE-2021-36312
value: CRITICAL

Trust: 1.0

NVD: CVE-2021-36312
value: CRITICAL

Trust: 0.8

CNNVD: CNNVD-202111-1964
value: CRITICAL

Trust: 0.6

VULHUB: VHN-398196
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2021-36312
severity: HIGH
baseScore: 8.5
vectorString: AV:N/AC:M/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 6.8
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.8

VULHUB: VHN-398196
severity: HIGH
baseScore: 8.5
vectorString: AV:N/AC:M/AU:S/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: SINGLE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 6.8
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2021-36312
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 2.3
impactScore: 6.0
version: 3.1

Trust: 2.0

OTHER: JVNDB-2021-015359
baseSeverity: CRITICAL
baseScore: 9.1
vectorString: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: HIGH
userInteraction: NONE
scope: CHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: NONE
impactScore: NONE
version: 3.0

Trust: 0.8

sources: VULHUB: VHN-398196 // JVNDB: JVNDB-2021-015359 // CNNVD: CNNVD-202111-1964 // NVD: CVE-2021-36312 // NVD: CVE-2021-36312

PROBLEMTYPE DATA

problemtype:CWE-259

Trust: 1.1

problemtype:Using hardcoded passwords (CWE-259) [ others ]

Trust: 0.8

sources: VULHUB: VHN-398196 // JVNDB: JVNDB-2021-015359 // NVD: CVE-2021-36312

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-202111-1964

TYPE

other

Trust: 0.6

sources: CNNVD: CNNVD-202111-1964

PATCH

title:DSA-2021-194url:https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app

Trust: 0.8

title:Dell EMC CloudLink Security vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=171052

Trust: 0.6

sources: JVNDB: JVNDB-2021-015359 // CNNVD: CNNVD-202111-1964

EXTERNAL IDS

db:NVDid:CVE-2021-36312

Trust: 3.3

db:JVNDBid:JVNDB-2021-015359

Trust: 0.8

db:CNNVDid:CNNVD-202111-1964

Trust: 0.6

db:VULHUBid:VHN-398196

Trust: 0.1

sources: VULHUB: VHN-398196 // JVNDB: JVNDB-2021-015359 // CNNVD: CNNVD-202111-1964 // NVD: CVE-2021-36312

REFERENCES

url:https://nvd.nist.gov/vuln/detail/cve-2021-36312

Trust: 1.4

url:https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app

Trust: 1.1

url:https-dellservices-lightning-force-com-one-one-app

Trust: 0.6

url:https://www.dell.com/support/kbdoc/en-us/000193031/

Trust: 0.6

sources: VULHUB: VHN-398196 // JVNDB: JVNDB-2021-015359 // CNNVD: CNNVD-202111-1964 // NVD: CVE-2021-36312

SOURCES

db:VULHUBid:VHN-398196
db:JVNDBid:JVNDB-2021-015359
db:CNNVDid:CNNVD-202111-1964
db:NVDid:CVE-2021-36312

LAST UPDATE DATE

2024-08-14T14:18:14.035000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-398196date:2021-11-24T00:00:00
db:JVNDBid:JVNDB-2021-015359date:2022-11-18T02:25:00
db:CNNVDid:CNNVD-202111-1964date:2021-11-25T00:00:00
db:NVDid:CVE-2021-36312date:2021-11-24T20:01:11.537

SOURCES RELEASE DATE

db:VULHUBid:VHN-398196date:2021-11-23T00:00:00
db:JVNDBid:JVNDB-2021-015359date:2022-11-18T00:00:00
db:CNNVDid:CNNVD-202111-1964date:2021-11-23T00:00:00
db:NVDid:CVE-2021-36312date:2021-11-23T20:15:11.043