CVE-2021-36301: Buffer Overflow
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36301?
CVE-2021-36301 is classified as a high severity vulnerability due to the potential for a stack buffer overflow that could allow remote code execution.
How do I fix CVE-2021-36301?
To fix CVE-2021-36301, update the Dell iDRAC 8 firmware to version 2.80.80.80 or later and the Dell iDRAC 9 firmware to version 4.40.40.00 or later.
Who is affected by CVE-2021-36301?
CVE-2021-36301 affects authenticated users of Dell iDRAC8 and iDRAC9 firmware versions prior to the specified updates.
What types of attacks can exploit CVE-2021-36301?
CVE-2021-36301 can be exploited by authenticated remote attackers to gain control over process execution on the affected systems.
Is CVE-2021-36301 actively being exploited?
As of the latest information, there are no confirmed reports of active exploitation of CVE-2021-36301, but it remains a critical vulnerability that should be addressed promptly.