NetSight
medium5.7

CVE-2021-21589

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization.

Impact

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 do not exit on failed Initialization. A local authenticated Service user could potentially exploit this vulnerability to escalate privileges.

Affected products

VendorProductAffected versions
DellEmc Unity Operating Environment
before 5.1.0.0.5.394
DellEmc Unity Xt Operating Environment
before 5.1.0.0.5.394
DellEmc Unityvsa Operating Environment
before 5.1.0.0.5.394

References