Dell EMC iDRAC8 < 2.83.83.83 (DSA-2022-069)

The version of Dell EMC iDRAC8 installed on the remote host is prior to 2.83.83.83. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-069 advisory. - Dell EMC iDRAC8 versions 2.81.81 and earlier contain a denial of service vulnerability. A remote unauthenticated attacker...

CVE-2022-24423

Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition...

CVE-2022-0778

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

CVE-2021-36347

iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating...

CVE-2021-36347

iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating...

CVE-2021-36347

CVE-2021-36347 affects Dell EMC iDRAC8 (before 2.82.82.82) and iDRAC9 (before 5.00.20.00). The issue is a stack-based buffer overflow in the iDRAC firmware that, if exploited by an authenticated remote attacker with high privileges, could allow control of the vulnerable process and access to the ...

CVE-2021-36347: Stack-based Buffer Overflow

iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating...

PT-2021-21243

Name of the Vulnerable Software and Affected Versions iDRAC9 versions prior to 5.00.20.00 iDRAC8 versions prior to 2.82.82.82 Description The issue is a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to...

Dell EMC iDRAC9 and EMC iDRAC8 Spoofing Vulnerability

Dell EMC iDRAC9 is the United States Dell DELL company's set of hardware and software system management solutions. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems.Dell EMC iDRAC8 versions prior to 2.80.80.80 and Dell EMC iDRAC9 versions...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

Code injection

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2021-21580

Dell EMC iDRAC8 prior to 2.80.80.80 and iDRAC9 prior to 5.00.00.00 are affected by a Content spoofing / Text injection vulnerability. A malicious URL can inject text to present a customized message in the iDRAC UI, enabling phishing-like deception. Public references describe this as a spoofing/te...

PT-2021-14626

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC8 versions prior to 2.80.80.80 Dell EMC iDRAC9 versions prior to 5.00.00.00 Description The issue is related to content spoofing and text injection, where a malicious URL can inject text to present a customized message on the...

CVE-2021-21580: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

Dell iDRAC8 Host Header Injection Vulnerability

The Dell iDRAC8 is an integrated Dell Remote Access Controller that helps IT administrators deploy, update, monitor and maintain servers without installing any additional software. A host header injection vulnerability exists in Dell iDRAC8 versions prior to 2.75.100.75. A remote, unauthenticated...

CVE-2021-21510

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections...

CVE-2021-21510

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections...

Design/Logic Flaw

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections...

CVE-2021-21510

Dell iDRAC8 is affected by a host header injection vulnerability in versions prior to 2.75.100.75. A remote, unauthenticated attacker could inject arbitrary Host header values to poison web caches or trigger redirects. Affected product: Dell iDRAC8; vulnerable component: web interface handling of...