6.1
Medium
CVE-2021-36322 Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability
Description
Dell Networking X-Series firmware versions prior to 3.0.1.8 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary host header values to poison the web-cache or trigger redirections.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Networking X-Series 3.0 | earliest → < 3.0.1.9 | 3.0.1.9 |