CVE-2021-21588

Name of the Vulnerable Software and Affected Versions Dell EMC PowerFlex versions 3.5.x

Description The issue concerns a Cross-Site WebSocket Hijacking vulnerability in the Presentation Server/WebUI. An unauthenticated attacker could exploit this by tricking a user into performing unwanted actions, potentially leading to configuration changes.

Recommendations For versions 3.5.x, consider restricting access to the Presentation Server/WebUI to minimize the risk of exploitation until a fix is available.