CVE-2021-36349

MEDIUM 4.3CVE-2021-36349 · Published 24/01/2022 · updated 17/06/2026

In short

CVE-2021-36349 is a MEDIUM (CVSS 4.3) vulnerability affecting emc data protection central (dell).
Chance of exploitation in the next 30 days (EPSS): 0.55%, higher than 46.3% of all vulnerabilities.
Fix: update to 19.6 or later.

Package	Affected versions	Patched versions
emc data protection central dell	`< 19.6`	`19.6`

Description

Dell EMC Data Protection Central versions 19.5 and prior contain a Server Side Request Forgery vulnerability in the DPC DNS client processing. A remote malicious user could potentially exploit this vulnerability, allowing port scanning of external hosts.

References

dell.com/support/kbdoc/000195103 · Vendor Advisory

More vulnerabilities in emc data protection central

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free