cvedb.io
CVE-2021-36309
HIGH · CVSS 7.1
EPSS exploitation probability: 0%
Published 2021-10-01T21:15:08.237 · Last modified 2026-06-17T03:58:38.037

Summary

Dell Enterprise SONiC OS, versions 3.3.0 and earlier, contains a sensitive information disclosure vulnerability. An authenticated malicious user with access to the system may use the TACACS\Radius credentials stored to read sensitive information and use it in further attacks.

Affected products

dell — enterprise_sonic_os

Does this affect you?

Add your gear to cvedb and we'll alert you only when dell ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.