Vulnerabilities > CVE-2021-36334 - Improper Neutralization of Formula Elements in a CSV File vulnerability in Dell EMC Cloud Link

047910
CVSS 6.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL

Summary

Dell EMC CloudLink 7.1 and all prior versions contain a CSV formula Injection Vulnerability. A remote high privileged attacker, may potentially exploit this vulnerability, leading to arbitrary code execution on end user machine

Vulnerable Configurations

Part Description Count
Application
Dell
1