Race Condition Vulnerability in Dell EMC iDRAC9

CVE-2021-21539

What is CVE-2021-21539?

Dell EMC iDRAC9 versions prior to 4.40.00.00 are susceptible to a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. This issue arises when a remote authenticated attacker exploits the timing discrepancies during simultaneous access to iDRAC via the web interface by a user with elevated privileges. If successful, the attacker could gain unauthorized access and potentially execute malicious actions that threaten the security of the system.

References