CVE-2021-36300

medium · 6.5

iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure.

6.5

CVSS

33.3%

EPSS (exploit prob.)

98th

EPSS percentile

2021-11-23

Published

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:L

Weaknesses

CWE-89

Affected products

Vendor	Product	Affected versions
dell	emc_idrac9_firmware	< 5.00.00.00

Check a specific version with /api/v1/cve/match.

References

https://support.emc.com/kb/000191229
https://support.emc.com/kb/000191229

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2021-36300