high8.8
CVE-2021-36307
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability.
Impact
Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Networking Os10 | before 10.4.3.8 from 10.5.0.0 before 10.5.0.10 from 10.5.1.0 before 10.5.1.10 from 10.5.2.0 before 10.5.2.8 |