CVE-2021-36299

high · 7.1

Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application.

7.1

CVSS

29.6%

EPSS (exploit prob.)

98th

EPSS percentile

2021-11-23

Published

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
dell	emc_idrac9_firmware	>= 4.40.00.00, < 4.40.29.00
dell	emc_idrac9_firmware	5.00.00.00

Check a specific version with /api/v1/cve/match.

References

https://support.emc.com/kb/000191229
https://support.emc.com/kb/000191229

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-36299