CVE-2021-36334

CVSS 5.9 MEDIUMEPSS 0.7%

Vexday Risk Score

13Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.9EPSS 0.7%KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

23 Nov 2021Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to arbitrary code execution on end user machine

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Affected products

Dell · CloudLink

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.dell.com/support/kbdoc/en-us/000193031/https-dellservices-lightning-force-com-one-one-app