Dell Emc IDRAC9 Firmware vulnerabilities

9 CVEs affecting Dell Emc IDRAC9 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2021-36301, published 2021-11-23.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-36300, published 2021-11-23. High severity, CVSS 8.2. EPSS: 33.3% chance of exploitation in the next 30 days. iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted…
CVE-2021-36299, published 2021-11-23. High severity, CVSS 8.1. EPSS: 29.6% chance of exploitation in the next 30 days. Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially…
CVE-2021-36301, published 2021-11-23. High severity, CVSS 7.2. EPSS: 27.7% chance of exploitation in the next 30 days. Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability…
CVE-2021-21579, published 2021-08-03. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by…
CVE-2021-21578, published 2021-08-03. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by…
CVE-2021-21581, published 2021-08-03. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript in a…
CVE-2021-21577, published 2021-08-03. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript…
CVE-2021-21576, published 2021-08-03. Medium severity, CVSS 6.1. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC iDRAC9 versions prior to 4.40.40.00 contain a DOM-based cross-site scripting vulnerability. A remote attacker could potentially exploit this vulnerability to run malicious HTML or JavaScript…
CVE-2021-21580, published 2021-08-03. Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days. Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized…