CVE-2021-36339: 
Dell EMC Solutions Enabler vulnerability analysis and mitigation

CVE-2021-36339 affects Dell EMC Virtual Appliances versions prior to 9.2.2.2. The vulnerability involves undocumented user accounts present in the system that could be exploited by local users. This security issue was discovered and reported by Thorsten Tüllmann (Dell Advisory).

The vulnerability has been assigned a CVSS v3.1 base score of 7.8 with the following vector string: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H. The attack vector is Local (L), with Low attack complexity (L), requiring Low privileges (L), and No user interaction (N). The scope is Unchanged (U), with High impact on Confidentiality (H), Integrity (H), and Availability (H) (Dell Advisory).

If exploited, this vulnerability could allow a local malicious user to gain privileged access to the virtual appliance, potentially compromising the system's confidentiality, integrity, and availability (Dell Advisory).

The vulnerability requires local access to the system and low privileges to exploit. The attack complexity is considered low, making it relatively straightforward to exploit if an attacker has the necessary local access (Dell Advisory).

Dell has released version 9.2.2.2 and later of the EMC Virtual Appliances to address this vulnerability. Users are advised to upgrade to the latest version to mitigate the security risk (Dell Advisory).