PT-2021-14627 · Dell Emc · Dell Emc Idrac9

Published 2021-08-03 · Updated 2021-08-09 · CVE-2021-21581

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC9 versions prior to 5.00.00.00

Description The issue allows a remote attacker to potentially exploit a cross-site scripting vulnerability, enabling them to run malicious HTML or JavaScript in a victim's browser. This can be achieved by tricking the victim into following a specially crafted link.

Recommendations For Dell EMC iDRAC9 versions prior to 5.00.00.00, update to version 5.00.00.00 or later to resolve the issue. As a temporary workaround, consider restricting access to the iDRAC9 interface to minimize the risk of exploitation.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-21581

Affected Products

Dell Emc Idrac9

References · 4

• https://dell.com/support/kbdoc/000189193 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-21581 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-21581 · Security Note
• https://t.me/cibsecurity/26761 · Telegram Post