CVE-2021-21596CWE-200

Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution…

Critical · published August 9, 2021

CVSS v3.1
9.6
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

🚨 An attacker on the same subnet can take complete control. This critical vulnerability in Dell OpenManage Enterprise could let them execute arbitrary code as easily as clicking a link! 🔥 Think of it like a party where someone gains access to the microphone and starts announcing whatever they want — a malicious insider can now manipulate the whole system without anyone catching on. If exploited, this vulnerability could allow an attacker to not only disclose sensitive information but also elevate their access privileges, making it a game-changer for malicious activity. Imagine a burglar not just stealing valuables but also unlocking every door in a building!

Put simply

Think of it like a party where someone gains access to the microphone and starts announcing whatever they want — a malicious insider can now manipulate the whole system without anyone catching on. This vulnerability allows attackers with access to the same local subnet to execute arbitrary code on affected systems running Dell OpenManage Enterprise versions 3.4 to 3.6.1 and Modular versions 1.20.00 to 1.30.00.

What to do

If exploited, this vulnerability could allow an attacker to not only disclose sensitive information but also elevate their access privileges, making it a game-changer for malicious activity. Imagine a burglar not just stealing valuables but also unlocking every door in a building! Immediate action is crucial! Update to the latest versions: 3.6.1 for OpenManage Enterprise and 1.30.01 for Modular to patch this critical vulnerability. Ensure proper network segmentation to minimize access risk. 🛡️ You've got this! By following these steps, you’ll not only secure your systems but also boost that security hero status! 💪🌟

The record
Technical detail
CVSS v3.1
9.6 · CRITICAL
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00750 · 54.4th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2021-08-09T21:05Z
EPSS history
Timeline
  • 09 AUG 21:05Z
    Dell OpenManage Enterprise versions 3.4 through 3.6.1 and Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00, contain a remote code execution…
    cvelistv5