VYPR
← All advisories
Medium severity6.0NVD Advisory· Published Aug 16, 2021· Updated Jun 17, 2026

CVE-2021-21599

CVE-2021-21599

Description

Dell EMC PowerScale OneFS versions 8.2.x - 9.2.1.x contain an OS command injection vulnerability. This may allow a user with ISI_PRIV_LOGIN_SSH or ISI_PRIV_LOGIN_CONSOLE to escalate privileges and escape the compliance guarantees. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell recommends to update/upgrade at the earliest opportunity.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • Dell/Powerscale Onefs4 versions
    cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:o:dell:emc_powerscale_onefs:*:*:*:*:*:*:*:*range: >=9.0.0.0,<=9.2.1
    • cpe:2.3:o:dell:emc_powerscale_onefs:8.2.2:*:*:*:*:*:*:*
    • (no CPE)range: 8.2.x - 9.2.1.x
    • (no CPE)range: 8.2.x - 9.2.1.x

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.