CVE-2021-21535CWE-306

Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability

High · published April 30, 2021

CVSS v3.1
7.4
EPSS
0%
Percentile
9.9
In the wild
Unconfirmed
What it is

Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability. A local unauthenticated attacker may exploit this vulnerability in order to gain root level access to the system.

The record
Technical detail
CVSS v3.1
7.4 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00204 · 9.9th percentile
Weakness
CWE-306 · Missing Authentication for Critical Function
Published
2021-04-30T17:40Z
EPSS history
Timeline
  • 30 APR 17:40Z
    Dell Hybrid Client versions prior to 1.5 contain a missing authentication for a critical function vulnerability
    cvelistv5