CVE-2021-21544

2.7 lowEPSS 0.9%

Low (2.7) in dell idrac9 firmware. EPSS 0.9% chance of exploitation in the next 30 days.

Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to manipulate the username field under the comment section and set the value to any user.

Severity

CVSS 3.1

2.7 low

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWEs: CWE-287, CWE-602
Published: 2021-04-30
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:idrac9_firmware

References

https://www.dell.com/support/kbdoc/000185293
https://www.dell.com/support/kbdoc/000185293

Check your stack JSON