Improper Authentication in Dell EMC iDRAC9
CVE-2021-21538

9.6CRITICAL

Key Information:

Vendor

Dell
Status
Integrated Dell Remote Access Controller (idrac)
Vendor
CVE Published:
29 July 2021

What is CVE-2021-21538?

The Dell EMC iDRAC9 has a vulnerability in versions 4.40.00.00 through prior to 4.40.10.00, which allows a remote unauthenticated attacker to exploit the system. This can lead to unauthorized access to the virtual console, posing risks to security and data integrity for affected users. It is essential for organizations using these versions to apply relevant security patches and updates to mitigate this vulnerability.

Affected Version(s)

Integrated Dell Remote Access Controller (iDRAC) < 4.40.10.00

References

https://www.dell.com/support/kbdoc/000186420
x_refsource_MISC

CVSS V3.1

Score:
9.6
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.