CVE-2021-36348: SQL Injection
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-36348?
CVE-2021-36348 is classified as a medium-severity vulnerability due to its potential for information disclosure and denial of service.
How do I fix CVE-2021-36348?
To fix CVE-2021-36348, upgrade to iDRAC9 firmware version 5.00.20.00 or later.
Who is affected by CVE-2021-36348?
CVE-2021-36348 affects users of iDRAC9 versions prior to 5.00.20.00 with remote authenticated access.
What kind of attack can be performed using CVE-2021-36348?
An attacker can exploit CVE-2021-36348 to conduct information disclosure or denial of service attacks by supplying crafted input.
Is CVE-2021-36348 specific to certain firmware versions?
Yes, CVE-2021-36348 specifically affects iDRAC9 firmware versions prior to 5.00.20.00.