CVE-2021-21531: 
Dell EMC Solutions Enabler vulnerability analysis and mitigation

Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability. The vulnerability was disclosed on March 24, 2021, affecting Dell Unisphere for PowerMax and related products including PowerMax OS 5978, Solutions Enabler, Solutions Enabler Virtual Appliance, and Unisphere for PowerMax Virtual Appliance (Dell Advisory).

The vulnerability allows a local authenticated malicious user with monitor role to perform unauthorized actions, bypassing intended authorization restrictions. The vulnerability has been assigned a CVSS v3.1 Base Score of 8.1 (High) with the vector string CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H, indicating network attack vector, low attack complexity, low privileges required, no user interaction needed, and high impacts to integrity and availability (Dell Advisory).

If exploited, this vulnerability could allow an authenticated user with monitor role to perform unauthorized actions beyond their intended privileges. The CVSS scoring indicates high impacts to both system integrity and availability, though confidentiality impact is rated as none (Dell Advisory).

The vulnerability requires local access and low-level privileges (monitor role) to exploit. The attack complexity is rated as low, meaning it does not require special access conditions or circumstances to exploit (Dell Advisory).

Dell has released version 9.2.1.6 of Unisphere for PowerMax to address this vulnerability. Users are advised to upgrade to this version or later. For PowerMax OS 5978, users should request OPT 579961 for Foxtail SR and Hickory SR releases (Dell Advisory).