CVE-2021-36301: Dell Emc IDRAC8 Firmware

High severity, CVSS 7.2. EPSS: 27.7% chance of exploitation in the next 30 days.

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system.

Affected products

• Dell Emc IDRAC8 Firmware: before 2.80.80.80 (fixed in 2.80.80.80)
• Dell Emc IDRAC9 Firmware: before 4.40.40.00 (fixed in 4.40.40.00)

Published 2021-11-23. Last modified 2026-06-17.