CVE-2021-21508 Dell CVE debrief

Who should care

System administrators and security teams responsible for Dell VxRail systems, especially those using versions before 7.0.200, should be aware of this vulnerability and take necessary actions to mitigate the risk. They should review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance.

Technical summary

Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account. The vulnerability has a CVSS score of 6.7 and a CVSS severity of MEDIUM. The vulnerability is caused by the storage of passwords in plain text.

Defensive priority

Medium priority should be given to patching or mitigating this vulnerability, as it could lead to unauthorized access to sensitive information. Additional security measures, such as multi-factor authentication, should be implemented to reduce the risk of unauthorized access.

Recommended defensive actions

• Apply the latest patch or update to VxRail Manager version 7.0.200 or later
• Conduct a thorough review of current user credentials and consider rotating them
• Implement additional security measures, such as multi-factor authentication, to reduce the risk of unauthorized access
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record was published on 2026-05-22T15:16:24.827Z and was last modified on 2026-07-23T16:10:00.137Z. The NVD entry is currently Awaiting Analysis. Dell VxRail versions before 7.0.200 contain a Plain-text Password Storage Vulnerability in VxRail Manager. A sys-admin user may exploit this vulnerability, leading to the disclosure of certain user credentials. The attacker may be able to use the exposed credentials to access the vulnerable application with privileges of the compromised account.

Official resources