CVE-2021-21538
CVE-2021-21538
Vexday Risk Score
28Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 9.6EPSS 1.7%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
29 Jul 2021Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the virtual console.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Affected products
Dell · Integrated Dell Remote Access Controller (iDRAC)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →