4.3
Medium
CVE-2021-21580 Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing /…
Description
Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Integrated Dell Remote Access Controller (iDRAC) 5.00 | earliest → < 5.00.00.00 | 5.00.00.00 |
Other CVEs of Integrated Dell Remote Access Controller (iDRAC)
The 24 CVEs of Integrated Dell Remote Access Controller (iDRAC) →
CVE-2021-36348
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability
5.9
Medium
CVE-2021-36347
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow…
6.2
Medium
CVE-2021-36346
Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability
5.3
Medium
CVE-2021-36301
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in…
5.9
Medium