Skip to content
Sign in
5.9 Medium

CVE-2021-21539 Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability

Description

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC through the web interface.

Affected products and versions

Product Affected versions Fixed in
Integrated Dell Remote Access Controller (iDRAC) 4.40 earliest → < 4.40.00.00 4.40.00.00

Other CVEs of Integrated Dell Remote Access Controller (iDRAC)

The 24 CVEs of Integrated Dell Remote Access Controller (iDRAC) →
CVE-2021-36348 iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability 5.9 Medium CVE-2021-36347 iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow… 6.2 Medium CVE-2021-36346 Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability 5.3 Medium CVE-2021-36301 Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in… 5.9 Medium
Track this CVE