CVE-2021-21589

published 2021-07-12

CVE-2021-21589: Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could…

medium 6.7 CVSS 3.1

AV L AC L PR H UI N S U C H I H A H

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could potentially exploit this vulnerability to escalate privileges.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
dell	emc_unity_operating_environment	< 5.1.0.0.5.394	5.1.0.0.5.394
dell	emc_unity_xt_operating_environment	< 5.1.0.0.5.394	5.1.0.0.5.394
dell	emc_unityvsa_operating_environment	< 5.1.0.0.5.394	5.1.0.0.5.394
dell	unity	>= unspecified < 5.1.0.0.5.394	5.1.0.0.5.394