Known vulnerabilities in Integrated Dell Remote Access Controller (iDRAC)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2021-36348 | iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability | 5.9 Medium | Jan 25, 2022 |
| CVE-2021-36347 | iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow… | 6.2 Medium | Jan 25, 2022 |
| CVE-2021-36346 | Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability | 5.3 Medium | Jan 25, 2022 |
| CVE-2021-36301 | Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in… | 5.9 Medium | Nov 23, 2021 |
| CVE-2021-36300 | iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability | 6.5 Medium | Nov 23, 2021 |
| CVE-2021-36299 | Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability | 7.1 High | Nov 23, 2021 |
| CVE-2021-21581 | Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability | 6.5 Medium | Aug 3, 2021 |
| CVE-2021-21580 | Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing /… | 4.3 Medium | Aug 3, 2021 |
| CVE-2021-21579 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability | 6.1 Medium | Aug 3, 2021 |
| CVE-2021-21578 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability | 6.1 Medium | Aug 3, 2021 |
| CVE-2021-21577 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability | 6.1 Medium | Aug 3, 2021 |
| CVE-2021-21576 | Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability | 6.1 Medium | Aug 3, 2021 |
| CVE-2021-21538 | Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability | 9.6 Critical | Jul 29, 2021 |
| CVE-2021-21544 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability | 2.7 Low | Apr 30, 2021 |
| CVE-2021-21543 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities | 4.8 Medium | Apr 30, 2021 |
| CVE-2021-21542 | Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities | 4.8 Medium | Apr 30, 2021 |
| CVE-2021-21541 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability | 6.1 Medium | Apr 30, 2021 |
| CVE-2021-21540 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability | 5.9 Medium | Apr 30, 2021 |
| CVE-2021-21539 | Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability | 5.9 Medium | Apr 30, 2021 |
| CVE-2021-21510 | Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability | 6.1 Medium | Mar 8, 2021 |
| CVE-2020-26198 | Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in… | 6.1 Medium | Dec 16, 2020 |
| CVE-2020-5366 | Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability | 7.1 High | Jul 9, 2020 |
| CVE-2020-5344 | Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer… | 7.0 High | Mar 31, 2020 |
| CVE-2019-3764 | Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to… | 5.0 Medium | Nov 7, 2019 |
Other Dell products
PowerScale OneFS 175
CPG BIOS 110
Secure Connect Gateway 5.0 - Appliance 104
Secure Connect Gateway 5.0 - Application 103
PowerProtect Data Domain 82
Wyse Management Suite 62
Unity 62
Secure Connect Gateway (SCG) Policy Manager 45
OpenManage Enterprise 41
PowerEdge Platform 32
SmartFabric OS10 Software 31
PowerProtect Data Manager 27