CVE-2021-36300: Dell Emc IDRAC9 Firmware

High severity, CVSS 8.2. EPSS: 33.3% chance of exploitation in the next 30 days.

iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure.

Affected products

• Dell Emc IDRAC9 Firmware: before 5.00.00.00 (fixed in 5.00.00.00)

Published 2021-11-23. Last modified 2026-06-17.