CVE-2021-21548 — Improper Certificate Validation in Dell EMC Unisphere FOR Powermax

CWE-295 — Improper Certificate Validation3 documents3 sources
Severity
7.4HIGHNVD
EPSS
0.1%
top 78.17%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Dell EMC Unisphere FOR PowermaxDell EMC Unisphere FOR Powermax Virtual ApplianceDell Powermax OS
Timeline
PublishedMar 17
Latest updateJul 6

Description

Dell EMC Unisphere for PowerMax versions before 9.1.0.27, Dell EMC Unisphere for PowerMax Virtual Appliance versions before 9.1.0.27, and PowerMax OS Release 5978 contain an improper certificate validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to carry out a man-in-the-middle attack by supplying a crafted certificate and intercepting the victim's traffic to view or modify a victim’s data in transit.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:NExploitability: 2.2 | Impact: 5.2

Affected Packages2 packages

▶NVDdell/emc_unisphere< 9.1.0.27

🔴Vulnerability Details

2
GHSA
GHSA-pcx5-cm5r-cf7f: Dell EMC Unisphere for PowerMax versions before 9↗2023-07-06
▶
CVEList
CVE-2021-21548: Dell EMC Unisphere for PowerMax versions before 9↗2023-03-17
▶
CVE-2021-21548 — Improper Certificate Validation | cvebase