CVE-2021-36347: Dell Integrated Dell Remote Access Controller (iDRAC)

Описание

Оригинално описание

iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.

Засегнати продукти

• Dell Integrated Dell Remote Access Controller (iDRAC): unspecified преди iDRAC8: 2.82.82.82, iDRAC9: 5.00.20.00

Вид слабост

• CWE-121 Препълване на буфера в стека

История

Други уязвимости в Dell Integrated Dell Remote Access Controller (iDRAC)

• 5.9CVE-2021-36348
• 5.3CVE-2021-36346
• 5.9CVE-2021-36301
• 6.5CVE-2021-36300
• 7.1CVE-2021-36299

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-36347
• https://nvd.nist.gov/vuln/detail/CVE-2021-36347
• https://www.dell.com/support/kbdoc/000194038