1. Home
  2. CVE Database
  3. CVE-2021-21544
LOW · 2.7

CVE-2021-21544

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability t...

Vulnerability Description

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user.

CVSS Score

2.7

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
DellIdrac9 Firmware< 4.40.00.00

Related Weaknesses (CWE)

CWE-287CWE-602

References

FAQ

What is CVE-2021-21544?

CVE-2021-21544 is a vulnerability with a CVSS score of 2.7 (LOW). Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability t...

How severe is CVE-2021-21544?

CVE-2021-21544 has been rated LOW with a CVSS base score of 2.7/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-21544?

Check the references section above for vendor advisories and patch information. Affected products include: Dell Idrac9 Firmware.