CVE-2021-36298: Dell Isilon Insightiq Firmware

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.

Affected products

• Dell Isilon Insightiq Firmware: before 4.1.4 (fixed in 4.1.4)

Published 2021-10-01. Last modified 2026-06-17.