VULNERABILITY INTELLIGENCE
CVE-2021-21595
CVSS score6 MEDIUM
EPSS probability0.24%
CISA KEVNot currently listed
Published2021-08-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Description
Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability could allow the compadmin user to elevate privileges. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell recommends to update/upgrade at the earliest opportunity.
Weakness classification
- security_alert@emc.com: CWE-77
- nvd@nist.gov: CWE-77
Primary references
- security_alert@emc.com — Patch, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Patch, Vendor Advisory