PT-2021-14590 · Dell Emc · Idrac9

Published 2021-04-30 · Updated 2022-10-24 · CVE-2021-21540

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 4.40.00.00

Description The issue is a stack-based overflow that could be exploited by a remote authenticated attacker to overwrite configuration information by injecting an arbitrarily large payload.

Recommendations For versions prior to 4.40.00.00, update to version 4.40.00.00 or later to resolve the issue.

Fix

Memory Corruption

Stack Overflow

Weakness Enumeration

CWE-787

CWE-121

Related Identifiers

CVE-2021-21540

Affected Products

Idrac9

References · 3

• https://osv.dev/vulnerability/CVE-2021-21540 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21540 · Security Note
• https://dell.com/support/kbdoc/000185293 · Vendor Advisory