CVE-2021-36307

HIGH

8.8

CVSS Score

Published: November 20, 2021 at 01:40 AM UTC

Updated: June 17, 2026 at 03:58 AM UTC

1 product affected across 1 vendorNetworking OS10

Using Networking OS by Dell?

Get instant alerts when new vulnerabilities affect Networking OS - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH8.8

Exploit prediction

EPSS 0.9%

Description

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Networking OS10 · Dell

95%

v < 10.4.3.8v < OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc10.5.0.0 ≤ v < 10.5.0.1010.5.1.0 ≤ v < 10.5.1.1010.5.2.0 ≤ v < 10.5.2.8

Affected range stops below 10.4.3.8, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.5.0.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.5.1.10, so it looks safe — our inference, not a vendor statement

Affected range stops below 10.5.2.8, so it looks safe — our inference, not a vendor statement

Affected range stops below OS10 10.4.3.8,OS10 10.5.0.6C3,OS10 10.5.0.10,OS10 10.5.1.10,OS10 10.5.2.8,OS10 10.5.3.0P1,OS10 10.5.2.3kcc, so it looks safe — our inference, not a vendor statement