CVE-2021-36302CWE-269

All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability

Critical · published February 9, 2022

CVSS v3.1
9.9
EPSS
1%
Percentile
60.3
In the wild
Unconfirmed
What it is

🚨 A remote user with standard credentials could easily climb the privilege ladder on Dell EMC Integrated Systems — it’s like a waiter getting access to the kitchen and then deciding to run the restaurant! 🔥 Think of it as a poorly secured restaurant where a server can just waltz into the manager’s office without any checks; they could alter the menu, manage reservations, and even kick the owner out! If exploited, this vulnerability could allow attackers to elevate their privileges to take control of the entire system, leading to unauthorized access, data breaches, or even total system compromise. That's a recipe for disaster, with potentially devastating consequences for your organization's security!

Put simply

Think of it as a poorly secured restaurant where a server can just waltz into the manager’s office without any checks; they could alter the menu, manage reservations, and even kick the owner out! This privilege escalation vulnerability allows remote malicious users with standard JEA (Just Enough Administration) credentials to elevate their access, essentially giving them the keys to the kingdom they shouldn't have.

What to do

If exploited, this vulnerability could allow attackers to elevate their privileges to take control of the entire system, leading to unauthorized access, data breaches, or even total system compromise. That's a recipe for disaster, with potentially devastating consequences for your organization's security! Patch your Dell EMC Integrated System for Microsoft Azure Stack Hub immediately to the latest version where this vulnerability has been addressed. Ensure to review user permissions and conduct a thorough security audit to limit any potential exploit avenues. You've got this! With the right steps, you can lock this down and keep your system secure. 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00933 · 60.3th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2022-02-09T20:00Z
EPSS history
Timeline
  • 09 FEB 20:00Z
    All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability
    cvelistv5