5.5
CVSSv2

CVE-2021-36299

Published: 23/11/2021 Updated: 27/11/2021
CVSS v2 Base Score: 5.5 | Impact Score: 4.9 | Exploitability Score: 8
CVSS v3 Base Score: 8.1 | Impact Score: 5.2 | Exploitability Score: 2.8
VMScore: 490
Vector: AV:N/AC:L/Au:S/C:P/I:N/A:P

Vulnerability Summary

Dell iDRAC9 versions 4.40.00.00 and later, but before 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dell emc idrac9 firmware

dell emc idrac9 firmware 5.00.00.00