CVE-2021-21541: XSS
First published: Fri Apr 30 2021(Updated: )
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.
Credit: security_alert@emc.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Dell Idrac9 Firmware | <4.40.00.00 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2021-21541?
CVE-2021-21541 is a DOM-based cross-site scripting vulnerability found in Dell EMC iDRAC9 versions prior to 4.40.00.00.
How does CVE-2021-21541 impact Dell EMC iDRAC9?
CVE-2021-21541 allows a remote unauthenticated attacker to exploit a vulnerability in Dell EMC iDRAC9 by tricking a victim application user to supply malicious HTML or JavaScript code to the browser's DOM environment.
What is the severity of CVE-2021-21541?
CVE-2021-21541 has a severity rating of 6.1 (Medium).
How can CVE-2021-21541 be fixed?
To fix CVE-2021-21541, update Dell EMC iDRAC9 firmware to version 4.40.00.00 or later.
Where can I find more information about CVE-2021-21541?
More information about CVE-2021-21541 can be found in the Dell EMC support knowledge base article: https://www.dell.com/support/kbdoc/000185293
- collector/nvd-index
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/tags
- agent/softwarecombine
- agent/description
- agent/first-publish-date
- agent/event
- vendor/dell
- canonical/dell idrac9 firmware