Read the docs
TI-2021-14710 Aliases CVE-2021-36349GHSA-v4gr-cw6x-c3jw

Server-side request forgery in Dell Data Protection Central

Priority LOW 21CWE-918Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Low · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-918 and the CVSS impact.

Summary

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts.

Why it matters now

EPSS 0.00554 46th percentileScored 2026-11-07
Fix Fixed Data Protection Central (Dell): 19.6

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
DellData Protection Centralbefore 19.619.6Patch availableCNA
  • Data Protection Central VendorDell Affected before 19.6 Fixed in 19.6 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:dell:emc_data_protection_central:*:*:*:*:*:*:*:*before 19.6VulnerableDell
  • cpe:2.3:a:dell:emc_data_protection_central:*:*:*:*:*:*:*:* Versions before 19.6 Vulnerable ·Dell

Remediation

  • Fix · CNA Data Protection Central (Dell) Fixed in 19.6

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Release ·

    Dell Data Protection Central 19.6

    2 records Highest priority Priority LOW 2 LOW

    Other records, highest priority first

    • TI-2021-19473 Improper input validation in Dell Data Protection CentralPriority LOW 35
    Show all 2 records →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-36349
  2. 2026-10-03 Alias added: GHSA-v4gr-cw6x-c3jw

References

Advisory 1

  • TI-2022-15267 Cross-site request forgery in Dell Data Protection Central CVSS 3.1HIGH 8.8
  • TI-2021-19473 Improper input validation in Dell Data Protection Central CVSS 3.1HIGH 7.5
  • TI-2019-02777 Improper certificate validation in Dell Data Protection Central CVSS 3.1HIGH 7.5
  • TI-2022-22191 Improper output encoding in Dell Data Protection Central CVSS 3.1MEDIUM 6.1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences