CVE-2021-21510: Dell IDRAC8 Firmware

Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days.

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections.

Affected products

• Dell IDRAC8 Firmware: before 2.75.100.75 (fixed in 2.75.100.75)

Published 2021-03-08. Last modified 2026-06-17.