CVE-2021-36300

—

CVSS 3.1

8.2 high

EPSS

33%p98

Published

Nov 23, 2021 (Nov 23, 2021)

Modified

Jun 17, 2026

Description

iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability by sending a specially crafted malicious request to crash the webserver or cause information disclosure.

Vendors: dell
Products: emc idrac9 firmware
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

NVD CVE.org GitHub PoCs EPSS (33.3%)

In the news0 stories

No ingested article mentions this CVE yet.