by Kastro
Paper/Archive/CVE-2021-21538

CVE-2021-21538

Dell Integrated Dell Remote Access Controller (iDRAC) — Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability.

EPSS 1%CVSS 10.0
critical.is priorityof 100
45
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 74.3.743 × 2014.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the virtual console.

Affected

ProductAffectedFixed inSource
Integrated Dell Remote Access Controller (iDRAC)unspecified – < 4.40.10.004.40.10.00CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
dell (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L

References

refdell.com/support/kbdoc/000186420