CVE-2021-21578: Medium severity Dell Emc Idrac9 Firmware vulnerability
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-21578?
CVE-2021-21578 is an open redirect vulnerability in Dell EMC iDRAC9 versions prior to 4.40.40.00.
How does CVE-2021-21578 affect Dell EMC iDRAC9?
CVE-2021-21578 allows a remote unauthenticated attacker to redirect users to arbitrary web URLs by tricking them into clicking on malicious links.
What is the severity of CVE-2021-21578?
CVE-2021-21578 has a medium severity with a CVSS score of 6.1.
How can an attacker exploit CVE-2021-21578?
An attacker can exploit CVE-2021-21578 by creating maliciously crafted links and tricking users into clicking on them.
Is there a fix for CVE-2021-21578?
Yes, Dell EMC has released a fix for CVE-2021-21578. Please refer to the Dell EMC support website for more information.