CVE-2021-36298CWE-327

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component

High · published October 1, 2021

CVSS v3.1
8.1
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00834 · 57.2th percentile
Weakness
CWE-327 · Use of a Broken or Risky Cryptographic Algorithm
Published
2021-10-01T20:20Z
EPSS history
Timeline
  • 01 OCT 20:20Z
    Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component
    cvelistv5