CVE-2021-21505: Dell EMC Integrated System for Microsoft Azure Stack

Описание

Оригинално описание

Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges.

Засегнати продукти

• Dell Dell EMC Integrated System for Microsoft Azure Stack Hub: unspecified преди 2102

Вид слабост

• CWE-255

История

Други уязвимости в Dell Dell EMC Integrated System for Microsoft Azure Stack Hub

• 9.9CVE-2021-36302

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-21505
• https://nvd.nist.gov/vuln/detail/CVE-2021-21505
• https://www.dell.com/support/kbdoc/en-us/000186008/dsa-2021-020-dell-emc-integrated-system-for-microsoft-azure-stack-hub-security-update-for-an-idrac-undocumented-account-vulnerability