What’s Vulnerable › Vulnerabilities

CVE-2021-21524

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-04-12 · updated 2026-06-17
• Weakness: CWE-502

Description

Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may lead to system compromise by unauthenticated attackers.

Affected products

• Dell Storage Monitoring And Reporting: before 4.5.0.1 — fixed in 4.5.0.1
• Dell Storage Resource Manager: before 4.5.0.1 — fixed in 4.5.0.1

How to fix

Upgrade to a fixed version: Dell Storage Monitoring And Reporting 4.5.0.1; Dell Storage Resource Manager 4.5.0.1. Check the vendor advisory for mitigations.

References

• https://www.dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities
• https://www.dell.com/support/kbdoc/en-us/000184753/dsa-2021-054-dell-emc-srm-and-dell-emc-storage-monitoring-and-reporting-smr-security-update-for-multiple-vulnerabilities

Get alerted when CVE-2021-21524 or the next vulnerability affects your stack