CVE-2021-36298 : Security Advisory and Response

Dell EMC InsightIQ, versions prior to 4.1.4, contain risky cryptographic algorithms in the SSH component. A remote unauthenticated attacker could potentially exploit this vulnerability leading to authentication bypass and remote takeover of the InsightIQ. This allows an attacker to take complete control of InsightIQ to affect services provided by SSH; so Dell recommends customers to upgrade at the earliest opportunity.

Understanding CVE-2021-36298

This CVE impacts Dell EMC InsightIQ versions prior to 4.1.4, exposing them to a critical vulnerability due to risky cryptographic algorithms in the SSH component.

What is CVE-2021-36298?

CVE-2021-36298 is a high-severity CVE affecting Dell EMC InsightIQ software version 4.1.4 and below. It allows a remote unauthenticated attacker to exploit the risky cryptographic algorithms in the SSH component, potentially leading to complete control of the InsightIQ.

The Impact of CVE-2021-36298

The impact of this CVE is high, with a CVSS base score of 8.1. It poses a significant risk of authentication bypass and remote takeover of the InsightIQ, compromising the confidentiality, integrity, and availability of the system.

Technical Details of CVE-2021-36298

The following technical details outline the specifics of CVE-2021-36298:

Vulnerability Description

The vulnerability lies in the risky cryptographic algorithms present in the SSH component of Dell EMC InsightIQ versions prior to 4.1.4. This flaw can be exploited by a remote attacker without authentication.

Affected Systems and Versions

Affected systems include Dell Isilon InsightIQ with versions less than 4.1.4 installed. It impacts custom versions where the cryptographic algorithms in the SSH component are not adequately secure.

Exploitation Mechanism

An unauthenticated attacker can exploit this vulnerability remotely, potentially gaining complete control over InsightIQ. By leveraging the insecure cryptographic algorithms, the attacker can bypass authentication and take over the system.

Mitigation and Prevention

To mitigate the risks associated with CVE-2021-36298, consider the following steps:

Immediate Steps to Take

Upgrade Dell Isilon InsightIQ to version 4.1.4 or later to eliminate the vulnerability.
Implement network controls to restrict access to InsightIQ and SSH services.

Long-Term Security Practices

Regularly monitor and apply security updates and patches provided by Dell for InsightIQ.
Conduct periodic security assessments to identify and address potential vulnerabilities proactively.

Patching and Updates

Stay informed about security advisories from Dell and promptly apply recommended patches and updates to ensure the security of InsightIQ.