Dell Integrated Dell Remote Access Controller (iDRAC)

Name: Dell Integrated Dell Remote Access Controller (iDRAC)
Brand: Dell

ProduktEU

Ein im Bedrohungsgraphen erfasstes Produkt; die Schwachstellen unten betreffen es bekanntermaßen.

KEV-gelistet

öffentlicher Exploit

ungepatcht

nach Schweregrad

2critical7high14medium1low

aktualisiert 2026-10-28

Schwachstellen (24)

Zugehörige CVEs.

Sortierung

ID	Schweregrad	EPSS	ausnutzbar	behoben	veröffentlicht	betroffen
CVE-2021-36300US	high8.2	33.3% (98th)	—	5.00.00.00	2021-11-23	unspecified → 5.00.00.00
CVE-2021-36299US	high8.1	29.6% (98th)	—	5.00.00.00	2021-11-23	unspecified → 5.00.00.00
CVE-2021-36301US	high7.2	27.7% (98th)	—	4.40.40.00	2021-11-23	unspecified → 4.40.40.00
CVE-2021-36346US	medium5.3	4.18% (91st)	—	2.82.82.82	2022-01-25	unspecified → 2.82.82.82
CVE-2020-5344US	critical9.8	3.84% (90th)	—	2.65.65.65	2020-03-31	unspecified → 2.65.65.65
CVE-2021-36347US	high7.2	2.21% (82nd)	—	iDRAC8: 2.82.82.82, iDRAC9: 5.00.20.00	2022-01-25	unspecified → iDRAC8: 2.82.82.82, iDRAC9: 5.00.20.00
CVE-2020-5366US	medium6.5	1.81% (78th)	—	4.20.20.20	2020-07-09	unspecified → 4.20.20.20
CVE-2021-21538US	critical10.0	1.50% (74th)	—	4.40.10.00	2021-07-29	unspecified → 4.40.10.00
CVE-2021-21540US	high8.1	1.16% (67th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-36348US	high8.1	1.13% (66th)	—	5.00.20.00	2022-01-25	unspecified → 5.00.20.00
CVE-2021-21510US	medium6.1	1.03% (63rd)	—	2.75.100.75	2021-03-08	unspecified → 2.75.100.75
CVE-2020-26198US	medium6.1	1.00% (63rd)	—	4.32.10.00 and 4.40.00.00	2020-12-16	unspecified → 4.32.10.00 and 4.40.00.00
CVE-2021-21544US	low2.7	0.92% (60th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2019-3764US	medium4.3	0.88% (59th)	—	iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70, iDRAC9: 3.40.40.40 and 3.36.36.36	2019-11-07	unspecified → iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70, iDRAC9: 3.40.40.40 and 3.36.36.36
CVE-2021-21579US	medium6.1	0.81% (57th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21578US	medium6.1	0.81% (57th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21541US	medium6.1	0.81% (57th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-21581US	medium6.1	0.75% (55th)	—	5.00.00.00	2021-08-03	unspecified → 5.00.00.00
CVE-2021-21577US	medium6.1	0.75% (55th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21576US	medium6.1	0.75% (55th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21580US	medium4.3	0.69% (53rd)	—	5.00.00.00	2021-08-03	unspecified → 5.00.00.00
CVE-2021-21543US	medium4.8	0.63% (50th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-21539US	high7.1	0.62% (49th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-21542US	medium4.8	0.40% (34th)	—	4.40.10.00	2021-04-30	unspecified → 4.40.10.00

Schwächen (8)

Die Schwächeklassen (CWEs), die die meisten dieser CVEs teilen.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-20Improper Input Validation1 CVEs

Datenquellen (1)

Welche Quellen diesen Datensatz belegen und wann.

EUEU Vulnerability Database (ENISA)24 CVEs

scry

Produkte tragen bekannte Schwachstellen, sobald sie im Internet exponiert sind. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan