5.9
Moyenne
CVE-2021-21539 Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability
Description
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attacker could potentially exploit this vulnerability to gain elevated privileges when a user with higher privileges is simultaneously accessing iDRAC through the web interface.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Integrated Dell Remote Access Controller (iDRAC) 4.40 | premières → < 4.40.00.00 | 4.40.00.00 |
Autres CVE de Integrated Dell Remote Access Controller (iDRAC)
Les 24 CVE de Integrated Dell Remote Access Controller (iDRAC) →
CVE-2021-36348
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability
5.9
Moyenne
CVE-2021-36347
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow…
6.2
Moyenne
CVE-2021-36346
Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability
5.3
Moyenne
CVE-2021-36301
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in…
5.9
Moyenne