CVE-2021-21507
Estado: ModificadaCrítica (9.8)—
Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Puntuación base: 9.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.54%
- Percentil entre todas las CVEs puntuadas: 44
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (11)
CWE
- CWE-261
- CWE-326
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2021-21507",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
],
"cvssMetricV31": [
{
"type": "Secondary",
"source": "security_alert@emc.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 8.8,
"attackVector": "ADJACENT_NETWORK",
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 2.8
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 9.8,
"attackVector": "NETWORK",
"baseSeverity": "CRITICAL",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
"integrityImpact": "HIGH",
"userInteraction": "NONE",
"attackComplexity": "LOW",
"availabilityImpact": "HIGH",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 5.9,
"exploitabilityScore": 3.9
}
]
},
"affected": [
{
"source": "security_alert@emc.com",
"affectedData": [
{
"vendor": "Dell",
"product": "VRTX Switch Modules",
"versions": [
{
"status": "affected",
"version": "unspecified",
"lessThan": "2.0.0.82",
"versionType": "custom"
}
]
}
]
}
],
"published": "2021-04-30T21:15:08.597",
"references": [
{
"url": "https://www.dell.com/support/kbdoc/000185252",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "security_alert@emc.com"
},
{
"url": "https://www.dell.com/support/kbdoc/000185252",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "security_alert@emc.com",
"description": [
{
"lang": "en",
"value": "CWE-261"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-326"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Dell EMC Networking X-Series firmware versions prior to 3.0.1.8 and Dell EMC PowerEdge VRTX Switch Module firmware versions prior to 2.0.0.82 contain a Weak Password Encryption Vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable system with privileges of the compromised account."
},
{
"lang": "es",
"value": "Dell EMC Networking X-Series versiones anteriores a 3.0.1.8 y Dell EMC PowerEdge VRTX Module, versiones de firrmware anteriores a 2.0.0.82, contienen una vulnerabilidad de Cifrado de Contraseña Débil. Un atacante remoto no autenticado podría explotar potencialmente esta vulnerabilidad, conllevando a una divulgación de determinadas credenciales de usuario. El atacante puede usar las credenciales expuestas para acceder al sistema vulnerable con privilegios de la cuenta comprometida."
}
],
"lastModified": "2026-06-17T03:35:41.740",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1008p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "797B281A-1F97-45EA-B63B-310C631E5300",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1008p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "D29913E0-EB40-4088-845E-478859BE9AA6"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1018p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDA3F68D-0C01-4235-8A6C-317D7FAF4EC4",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1018p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "B86EE4BF-6DA7-4F74-9116-FCC93A5D0C8B"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1026p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DE3522DC-9259-4B4B-BD11-B6106C5F4C8E",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1026p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "470280E0-8C95-40E1-B523-F6D8A998FDA2"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1052p_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A657AA7A-4462-4AEF-A377-57B99066B142",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1052p:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "1BCA777B-BA3F-4585-8F42-D3EF3F3E805D"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x4012_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0013FB8E-D762-4D5A-929E-C4FF1064A122",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x4012:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "44113AAD-07FF-45DB-BDCF-A21BF483E286"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:r1-2401_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5F70190-8D9F-4A81-AF65-0559346960AA",
"versionEndExcluding": "2.0.0.82"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:r1-2401:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "0D1BA0CC-6EC3-4B4D-BC40-EAF3B1CD54C3"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:r1-2210_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1CC4E63C-90E4-4606-9953-7FB8242E83E4",
"versionEndExcluding": "2.0.0.82"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:r1-2210:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "C987205B-1645-41F7-8F0C-10ADF28B6106"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1008_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "600B25AD-39D3-4A94-88DC-BEDBEC32E490",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1008:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "A34519BF-43D5-4D05-984F-EF4F584B5756"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1018_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5B705EFB-0224-4719-B77D-FFD86FA99B37",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1018:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "66BE7D70-2B8F-4B94-A9F2-E2CD89CE1762"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1026_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DC0ADD8-7AFE-41EA-B30B-32629E364355",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1026:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "ACB73FAE-5682-42FA-A423-23B1FC193244"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:dell:x1052_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CD4C67D4-0009-4FF0-AEE5-D3ACA36E3796",
"versionEndExcluding": "3.0.1.8"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:dell:x1052:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "93A4CE96-3213-4BBA-8C31-8CFB3001BCC1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "security_alert@emc.com"
}