Deserialization of untrusted data in Dell EMC Storage Monitoring and Reporting
Priority MEDIUM 48CWE-502Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-502.
Summary
Dell SRM versions prior to 4.5.0.1 and Dell SMR versions prior to 4.5.0.1 contain an Untrusted Deserialization Vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability, leading to arbitrary privileged code execution on the vulnerable application. The severity is Critical as this may lead to system compromise by unauthenticated attackers.
Why it matters now
EPSS 0.03594 89th percentileScored 2026-11-07
Fix Fixed Dell EMC Storage Monitoring and Reporting (Dell): 4.5.0.1
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Dell | Dell EMC Storage Monitoring and Reporting | before 4.5.0.1 | 4.5.0.1 | Patch available | CNA |
- Dell EMC Storage Monitoring and Reporting VendorDell Affected before 4.5.0.1 Fixed in 4.5.0.1 Patch available CNA
Remediation
- Fix · CNA Dell EMC Storage Monitoring and Reporting (Dell) Fixed in 4.5.0.1
Timeline
- 2026-10-02 Threatist record created from CVE-2021-21524
- 2026-10-03 Alias added: GHSA-4xvq-9wvg-wghg
More Dell Storage Monitoring And Reporting vulnerabilities
- TI-2024-00145 Uncontrolled resource consumption in Dell Storage Resource Manager CVSS 3.1MEDIUM 6.5
Sources
- CVE-2021-21524 · CVE Program
- CVE-2021-21524 · NVD
- FIRST EPSS
- GHSA-4xvq-9wvg-wghg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences