CVE-2021-36339: Dell Powermax OS

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

The Dell EMC Virtual Appliances before 9.2.2.2 contain undocumented user accounts. A local malicious user may potentially exploit this vulnerability to get privileged access to the virtual appliance.

Affected products

• Dell Powermax OS: version 5978 only
• Dell Solutions Enabler: before 9.1.0.18 (fixed in 9.1.0.18); from 9.2.0.0, before 9.2.3.0 (fixed in 9.2.3.0)
• Dell Solutions Enabler Virtual Appliance: before 9.1.0.18 (fixed in 9.1.0.18); from 9.2.0.0, before 9.2.3.0 (fixed in 9.2.3.0)
• Dell Unisphere 360: before 9.1.0.29 (fixed in 9.1.0.29); from 9.2.0.0, before 9.2.3.3 (fixed in 9.2.3.3)
• Dell Unisphere For Powermax: before 9.1.0.31 (fixed in 9.1.0.31); from 9.2.0.0, before 9.2.3.4 (fixed in 9.2.3.4)
• Dell Unisphere For Powermax Virtual Appliance: before 9.1.0.31 (fixed in 9.1.0.31); from 9.2.0.0, before 9.2.3.4 (fixed in 9.2.3.4)
• Dell Vasa: before 9.1.0.723 (fixed in 9.1.0.723); from 9.2.0.0, before 9.2.3.0 (fixed in 9.2.3.0)

Published 2022-01-21. Last modified 2026-06-17.