← Vulnerability feed

Vulnerability record · CVE-2021-21590 · published 12 July 2021

CVE-2021-21590: Dell emc unity operating environment information exposure vulnerability

Dell · Emc Unity Operating Environment

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

6.7 CVSS 3.1 Medium EPSS 0.20% · top 91.4% CWE-200 · Information exposureCWE-522 · Insufficiently protected credentials
6.7CVSS 3.1 base score, v2 4.6
0.20%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
2References
17 Jun 2026Last modified by NVD

Description

Dell EMC Unity, Unity XT, and UnityVSA versions prior to 5.1.0.0.5.394 contain a plain-text password storage vulnerability. A local malicious user with high privileges may use the exposed password to gain access with the privileges of the compromised user.

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://www.dell.com/support/kbdoc/000189204 Vendor Advisory
https://www.dell.com/support/kbdoc/000189204 Vendor Advisory

Track CVE-2021-21590 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

9.8CVE-2021-36287Dell emc unity operating environment os command injection vulnerabilityDell VNX2 for file version 8.1.21.266 and earlier, contain an unauthenticated remote code execution vulnerability which may lead unauthenticated user…EPSS 2.6%9.8CVE-2021-36294Dell emc unity operating environment vulnerabilityDell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability. A remote unauthenticated attacker may exploit …EPSS 1.6%9.8CVE-2018-1183Dell emc smis xml external entity (xxe) vulnerabilityIn Dell EMC Unisphere for VMAX Virtual Appliance versions prior to 8.4.0.8, Dell EMC Solutions Enabler Virtual Appliance versions prior to 8.4.0.8, D…EPSS 2.0%9.1CVE-2021-36288Dell emc unity operating environment path traversal vulnerabilityDell VNX2 for File version 8.1.21.266 and earlier, contain a path traversal vulnerability which may lead unauthenticated users to read/write restrict…EPSS 1.0%7.8CVE-2021-36289Dell emc unity operating environment sensitive information in log file vulnerabilityDell VNX2 OE for File versions 8.1.21.266 and earlier, contain a sensitive information disclosure vulnerability. A local malicious user may exploit t…EPSS 0.24%7.8CVE-2019-3741Dell emc unity operating environment vulnerabilityDell EMC Unity and UnityVSA versions prior to 5.0.0.0.5.116 contain a plain-text password storage vulnerability. A Unisphere user’s (including the ad…EPSS 0.34%7.8CVE-2018-11064Dell emc unity operating environment incorrect permission assignment vulnerabilityDell EMC Unity OE versions 4.3.0.x and 4.3.1.x and UnityVSA OE versions 4.3.0.x and 4.3.1.x contains an Incorrect File Permissions vulnerability. A l…EPSS 0.39%7.5CVE-2020-5319Dell emc unity operating environment vulnerabilityDell EMC Unity, Dell EMC Unity XT, and Dell EMC UnityVSA versions prior to 5.0.2.0.5.009 contain a Denial of Service vulnerability on NAS Server SSH …EPSS 1.4%

Source: NIST National Vulnerability Database (record CVE-2021-21590), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.