CVE-2021-36308CWE-288

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability

Medium · published November 20, 2021

CVSS v3.1
5.9
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability. A remote unauthenticated attacker could exploit this vulnerability to gain access and perform actions on the affected system.

The record
Technical detail
CVSS v3.1
5.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.03309 · 88.5th percentile
Weakness
CWE-288 · Authentication Bypass Using an Alternate Path or Channel
Published
2021-11-20T01:40Z
EPSS history
Timeline
  • 20 NOV 01:40Z
    Networking OS10, versions prior to October 2021 with Smart Fabric Services enabled, contains an authentication bypass vulnerability
    cvelistv5