Skip to content
Sign in
5.9 Medium

CVE-2021-36348 iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability

Description

iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.

Affected products and versions

Product Affected versions Fixed in
Integrated Dell Remote Access Controller (iDRAC) 5.00 earliest → < 5.00.20.00 5.00.20.00

Other CVEs of Integrated Dell Remote Access Controller (iDRAC)

The 24 CVEs of Integrated Dell Remote Access Controller (iDRAC) →
CVE-2021-36347 iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow… 6.2 Medium CVE-2021-36346 Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability 5.3 Medium CVE-2021-36301 Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in… 5.9 Medium CVE-2021-36300 iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability 6.5 Medium
Track this CVE