CVE-2021-36301: Dell Integrated Dell Remote Access Controller (iDRAC)

Описание

Оригинално описание

Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm. An authenticated remote attacker may potentially exploit this vulnerability to control process execution and gain access to the underlying operating system.

Засегнати продукти

• Dell Integrated Dell Remote Access Controller (iDRAC): unspecified преди 4.40.40.00

Вид слабост

• CWE-121 Препълване на буфера в стека

История

Други уязвимости в Dell Integrated Dell Remote Access Controller (iDRAC)

• 5.9CVE-2021-36348
• 6.2CVE-2021-36347
• 5.3CVE-2021-36346
• 6.5CVE-2021-36300
• 7.1CVE-2021-36299

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-36301
• https://nvd.nist.gov/vuln/detail/CVE-2021-36301
• https://support.emc.com/kb/000191229