Content Spoofing in Dell EMC iDRAC Products
CVE-2021-21580

4.3MEDIUM

Key Information:

Vendor

Dell
Status
Integrated Dell Remote Access Controller (idrac)
Vendor
CVE Published:
3 August 2021

What is CVE-2021-21580?

Dell EMC iDRAC8 and iDRAC9 versions prior to specified releases are susceptible to a vulnerability that allows attackers to inject malicious URLs. This results in content spoofing, where a malicious actor can present misleading information to users, potentially leading to phishing attacks. The attacker can manipulate the displayed text, tricking users into trusting false messages that appear legitimate. It is crucial for users of affected iDRAC versions to apply the necessary updates to safeguard against this risk.

Affected Version(s)

Integrated Dell Remote Access Controller (iDRAC) < 5.00.00.00

References

https://www.dell.com/support/kbdoc/000189193
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.