PT-2021-21242 · Dell+1 · Dell Idrac 8+1

Published 2021-12-16 · Updated 2022-02-01 · CVE-2021-36346

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Name of the Vulnerable Software and Affected Versions Dell iDRAC 8 versions prior to 2.82.82.82 Check Point GAiA (affected versions not specified)

Description The issue allows an unauthenticated remote attacker to potentially exploit a denial of service vulnerability, denying access to the iDRAC webserver.

Recommendations For Dell iDRAC 8 versions prior to 2.82.82.82, update to version 2.82.82.82 or later. For Check Point GAiA, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2021-36346

Affected Products

Check Point Gaia

Dell Idrac 8

References · 6

• https://dell.com/support/kbdoc/en-us/000194038/dsa-2021-259 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-36346 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-36346 · Security Note
• https://t.me/cvenotify/25827 · Telegram Post
• https://t.me/cvenotify/26095 · Telegram Post
• https://t.me/cibsecurity/36282 · Telegram Post