Dell Integrated Dell Remote Access Controller (iDRAC)

Name: Dell Integrated Dell Remote Access Controller (iDRAC)
Brand: Dell

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

unpatched

by severity

2critical7high14medium1low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-36300US	high8.2	33.3% (98th)	—	5.00.00.00	2021-11-23	unspecified → 5.00.00.00
CVE-2021-36299US	high8.1	29.6% (98th)	—	5.00.00.00	2021-11-23	unspecified → 5.00.00.00
CVE-2021-36301US	high7.2	27.7% (98th)	—	4.40.40.00	2021-11-23	unspecified → 4.40.40.00
CVE-2021-36346US	medium5.3	4.18% (91st)	—	2.82.82.82	2022-01-25	unspecified → 2.82.82.82
CVE-2020-5344US	critical9.8	3.84% (90th)	—	2.65.65.65	2020-03-31	unspecified → 2.65.65.65
CVE-2021-36347US	high7.2	2.21% (82nd)	—	iDRAC8: 2.82.82.82, iDRAC9: 5.00.20.00	2022-01-25	unspecified → iDRAC8: 2.82.82.82, iDRAC9: 5.00.20.00
CVE-2020-5366US	medium6.5	1.81% (78th)	—	4.20.20.20	2020-07-09	unspecified → 4.20.20.20
CVE-2021-21538US	critical10.0	1.50% (74th)	—	4.40.10.00	2021-07-29	unspecified → 4.40.10.00
CVE-2021-21540US	high8.1	1.16% (67th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-36348US	high8.1	1.13% (66th)	—	5.00.20.00	2022-01-25	unspecified → 5.00.20.00
CVE-2021-21510US	medium6.1	1.03% (63rd)	—	2.75.100.75	2021-03-08	unspecified → 2.75.100.75
CVE-2020-26198US	medium6.1	1.00% (63rd)	—	4.32.10.00 and 4.40.00.00	2020-12-16	unspecified → 4.32.10.00 and 4.40.00.00
CVE-2021-21544US	low2.7	0.92% (60th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2019-3764US	medium4.3	0.88% (59th)	—	iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70, iDRAC9: 3.40.40.40 and 3.36.36.36	2019-11-07	unspecified → iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70, iDRAC9: 3.40.40.40 and 3.36.36.36
CVE-2021-21579US	medium6.1	0.81% (57th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21578US	medium6.1	0.81% (57th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21541US	medium6.1	0.81% (57th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-21581US	medium6.1	0.75% (55th)	—	5.00.00.00	2021-08-03	unspecified → 5.00.00.00
CVE-2021-21577US	medium6.1	0.75% (55th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21576US	medium6.1	0.75% (55th)	—	4.40.40.00	2021-08-03	unspecified → 4.40.40.00
CVE-2021-21580US	medium4.3	0.69% (53rd)	—	5.00.00.00	2021-08-03	unspecified → 5.00.00.00
CVE-2021-21543US	medium4.8	0.63% (50th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-21539US	high7.1	0.62% (49th)	—	4.40.00.00	2021-04-30	unspecified → 4.40.00.00
CVE-2021-21542US	medium4.8	0.40% (34th)	—	4.40.10.00	2021-04-30	unspecified → 4.40.10.00

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs
CWE-121Stack-based Buffer Overflow4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-287Improper Authentication3 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')3 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3 CVEs
CWE-601URL Redirection to Untrusted Site ('Open Redirect')2 CVEs
CWE-20Improper Input Validation1 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan