high8.1
CVE-2021-36348
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability.
Impact
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Integrated Dell Remote Access Controller 9 Firmware | before 5.00.20.00 |