CVE-2021-36307: Dell Networking OS10

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

Networking OS10, versions prior to October 2021 with RESTCONF API enabled, contains a privilege escalation vulnerability. A malicious low privileged user with specific access to the API could potentially exploit this vulnerability to gain admin privileges on the affected system.

Affected products

• Dell Networking OS10: before 10.4.3.8 (fixed in 10.4.3.8); from 10.5.0.0, before 10.5.0.10 (fixed in 10.5.0.10); from 10.5.1.0, before 10.5.1.10 (fixed in 10.5.1.10); from 10.5.2.0, before 10.5.2.8 (fixed in 10.5.2.8)

Published 2021-11-20. Last modified 2026-06-17.