CVE-2021-21544 Auth bypass in Integrated Dell Remote Access Controller (iDRAC)
A remote authenticated attacker with high privileges can manipulate username fields to impersonate any user, requiring a firmware upgrade.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-21544?
CVE-2021-21544 is a low-severity authentication bypass vulnerability in Integrated Dell Remote Access Controller (iDRAC), published on 30 Apr 2021. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user.
Which versions are affected by CVE-2021-21544?
It affects 1 product.
Products include Dell Idrac9 Firmware.
How do I fix CVE-2021-21544?
No fix has been published for CVE-2021-21544 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2021-21544 being exploited?
There is no known exploitation of CVE-2021-21544 in the wild and no public exploit code.
Other vulnerabilities in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2021-21538 Auth bypass in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2019-3706 Web Interface Authentication Bypass Vulnerability
- CVE-2019-3707 WS-MAN Authentication Bypass Vulnerability
- CVE-2020-5366 Path traversal in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2018-1249 Security feature bypass in iDRAC9
Sources
Also known as GHSA-2p3j-cmc3-j53x.