Skip to content
Sign in
6.1 Medium

CVE-2021-21510 Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability

Description

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections.

Affected products and versions

Product Affected versions Fixed in
Integrated Dell Remote Access Controller (iDRAC) 2.75 earliest → < 2.75.100.75 2.75.100.75

Other CVEs of Integrated Dell Remote Access Controller (iDRAC)

The 24 CVEs of Integrated Dell Remote Access Controller (iDRAC) →
CVE-2021-36348 iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability 5.9 Medium CVE-2021-36347 iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow… 6.2 Medium CVE-2021-36346 Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability 5.3 Medium CVE-2021-36301 Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in… 5.9 Medium
Track this CVE