CVE-2021-36348
Last modified
CVE-2021-36348 is a high-severity vulnerability rated 8.1/10 on the CVSS scale. iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.. EPSS estimates a 1.13% chance of exploitation in the next 30 days.
Description
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Dell | Integrated Dell Remote Access Controller 9 Firmware | < 5.00.20.00 |
References
- https://www.dell.com/support/kbdoc/000194038Vendor Advisory
- https://www.dell.com/support/kbdoc/000194038Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-36348?
How severe is CVE-2021-36348?
How do I fix CVE-2021-36348?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-36340Dell EMC SCG 5.00.00.10 and earlier, contain a sensitive inf…5.5
- CVE-2021-36341Dell Wyse Device Agent version 14.5.4.1 and below contain a …5.5
- CVE-2021-36342Dell BIOS contains an improper input validation vulnerabilit…6.4
- CVE-2021-36343Dell BIOS contains an improper input validation vulnerabilit…6.4
- CVE-2021-36346Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of…5.3
- CVE-2021-36347iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prio…7.2
- CVE-2021-36349Dell EMC Data Protection Central versions 19.5 and prior con…4.3
- CVE-2021-3635A flaw was found in the Linux kernel netfilter implementatio…4.4
- CVE-2021-36350Dell PowerScale OneFS, versions 8.2.2-9.3.0.x, contain an au…7.5
- CVE-2021-36351SQL Injection Vulnerability in Care2x Open Source Hospital I…9.8
- CVE-2021-36352Stored cross-site scripting (XSS) vulnerability in Care2x Ho…5.4
- CVE-2021-36356KRAMER VIAware through August 2021 allows remote attackers t…9.8
Are you affected by CVE-2021-36348?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST