CVE-2021-36322 — Dell / Networking X-Series

CVE-2021-36322

Dell / Networking X-Series PUBLISHED

Description (CNA)

Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections.

Affected (CNA)

Vendor / product	Versions
Dell / Networking X-Series	affected unspecified before 3.0.1.9

CWE

CWE-20

References

https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000193230/dsa-2021-191-dell-networking-x-series-security-update-for-multiple-security-vulnerabilities