CVE-2021-21544

LOW

Dell Idrac9 Firmware < 4.40.00.00 - Authentication Bypass

Title source: rule
STIX 2.1

Description

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user.

Scores

CVSS v3 2.7
EPSS 0.0029
EPSS Percentile 52.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Details

CWE
CWE-287 CWE-602
Status published
Products (1)
dell/idrac9_firmware < 4.40.00.00
Published Apr 30, 2021
Tracked Since Feb 18, 2026