CVE-2021-36348

8.1 highEPSS 1.1%

High (8.1) in dell integrated dell remote access controller 9 firmware. EPSS 1.1% chance of exploitation in the next 30 days.

iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.

Severity

CVSS 3.1

8.1 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 66% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2022-01-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

dell:integrated_dell_remote_access_controller_9_firmware

References

https://www.dell.com/support/kbdoc/000194038
https://www.dell.com/support/kbdoc/000194038

Check your stack JSON