CVE-2021-36347
Last modified
CVE-2021-36347 is a high-severity vulnerability rated 7.2/10 on the CVSS scale. iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.. EPSS estimates a 2.40% chance of exploitation in the next 30 days.
Description
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Integrated Dell Remote Access Controller 8 Firmware | < 2.82.82.82 |
| Dell | Integrated Dell Remote Access Controller 9 Firmware | < 5.00.20.00 |
References
- https://www.dell.com/support/kbdoc/000194038Vendor Advisory
- https://www.dell.com/support/kbdoc/000194038Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-36347?
How severe is CVE-2021-36347?
How do I fix CVE-2021-36347?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-3634A flaw has been found in libssh in versions prior to 0.9.6. …6.5
- CVE-2021-36340Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive inf…5.5
- CVE-2021-36341Dell Wyse Device Agent version 14.5.4.1 and below contain a …5.5
- CVE-2021-36342Dell BIOS contains an improper input validation vulnerabilit…6.4
- CVE-2021-36343Dell BIOS contains an improper input validation vulnerabilit…6.4
- CVE-2021-36346Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of…5.3
- CVE-2021-36348iDRAC9 versions prior to 5.00.20.00 contain an input injecti…8.1
- CVE-2021-36349Dell EMC Data Protection Central versions 19.5 and prior con…4.3
- CVE-2021-3635A flaw was found in the Linux kernel netfilter implementatio…4.4
- CVE-2021-36350Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an au…7.5
- CVE-2021-36351SQL Injection Vulnerability in Care2x Open Source Hospital I…9.8
- CVE-2021-36352Stored cross-site scripting (XSS) vulnerability in Care2x Ho…5.4
Are you affected by CVE-2021-36347?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST