Vulnerabilities > CVE-2021-36349 - Server-Side Request Forgery (SSRF) vulnerability in Dell EMC Data Protection Central

047910
CVSS 4.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
dell
CWE-918
NVD
Published: 2022-01-24
Updated: 2022-01-28

Summary

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts.

Vulnerable Configurations

Part Description Count
Application
Dell
8

Common Weakness Enumeration (CWE)

References