CVE-2021-21538 Auth bypass in Integrated Dell Remote Access Controller (iDRAC)
Remote unauthenticated attackers can bypass authentication to access the virtual console in Dell iDRAC9, requiring an upgrade to secure the system.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2021-21538?
CVE-2021-21538 is a critical authentication bypass vulnerability in Integrated Dell Remote Access Controller (iDRAC), published on 29 Jul 2021. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to gain access to the virtual console.
Weakness: CWE-287
Which versions are affected by CVE-2021-21538?
It affects 1 product.
Products include Dell Idrac9 Firmware.
How do I fix CVE-2021-21538?
No fix has been published for CVE-2021-21538 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-21538 being exploited?
There is no known exploitation of CVE-2021-21538 in the wild and no public exploit code.
Other vulnerabilities in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2019-3706 Web Interface Authentication Bypass Vulnerability
- CVE-2019-3707 WS-MAN Authentication Bypass Vulnerability
- CVE-2020-5366 Path traversal in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2018-1249 Security feature bypass in iDRAC9
- CVE-2021-21541 Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)
Sources
Also known as GHSA-rg74-cg6p-wp8q.