CVE-2021-21544CWE-602

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability

Low · published April 30, 2021

CVSS v3.1
2.7
EPSS
1%
Percentile
59.9
In the wild
Unconfirmed
What it is

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user.

The record
Technical detail
CVSS v3.1
2.7 · LOW
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00921 · 59.9th percentile
Weakness
CWE-602 · Client-Side Enforcement of Server-Side Security
Published
2021-04-30T20:55Z
EPSS history
Timeline
  • 30 APR 20:55Z
    Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability
    cvelistv5