CVE-2021-21578CWE-601

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability

Medium · published August 3, 2021

CVSS v3.1
6.1
EPSS
1%
Percentile
56.6
In the wild
Unconfirmed
What it is

Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00815 · 56.6th percentile
Weakness
CWE-601 · URL Redirection to Untrusted Site ('Open Redirect')
Published
2021-08-03T15:30Z
EPSS history
Timeline
  • 03 AUG 15:30Z
    Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability
    cvelistv5