CVE-2021-21544

Katalog CVE

CVSS 2.7 · Low EPSS 0,92%

Kerentanan Client-Side Enforcement of Server-Side Security pada dell idrac9 firmware. Skor CVSS 3.1 2.7 (Low) menurut NVD.

Deskripsi (NVD)

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user.

Rincian

Terbit di NVD

30 April 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

2.7 (Low), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-602: Client-Side Enforcement of Server-Side Security
CWE-287: Improper Authentication

EPSS (30 hari)

0,92% peluang dieksploitasi; lebih tinggi dari 59,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.dell.com/support/kbdoc/000185293 advisory vendor