CVE-2021-21578: Dell Emc IDRAC9 Firmware

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.

Affected products

• Dell Emc IDRAC9 Firmware: before 4.40.40.00 (fixed in 4.40.40.00)

Published 2021-08-03. Last modified 2026-06-17.