CVE-2021-21541: XSS
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by tricking a victim application user to supply malicious HTML or JavaScript code to DOM environment in the browser. The malicious code is then executed by the web browser in the context of the vulnerable web application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21541?
CVE-2021-21541 is a DOM-based cross-site scripting vulnerability found in Dell EMC iDRAC9 versions prior to 4.40.00.00.
How does CVE-2021-21541 impact Dell EMC iDRAC9?
CVE-2021-21541 allows a remote unauthenticated attacker to exploit a vulnerability in Dell EMC iDRAC9 by tricking a victim application user to supply malicious HTML or JavaScript code to the browser's DOM environment.
What is the severity of CVE-2021-21541?
CVE-2021-21541 has a severity rating of 6.1 (Medium).
How can CVE-2021-21541 be fixed?
To fix CVE-2021-21541, update Dell EMC iDRAC9 firmware to version 4.40.00.00 or later.
Where can I find more information about CVE-2021-21541?
More information about CVE-2021-21541 can be found in the Dell EMC support knowledge base article: https://www.dell.com/support/kbdoc/000185293