Known vulnerabilities in iDRAC9 - page 2

Vendor: Dell
Software: iDRAC9
Software CPE: cpe:2.3:a:dell:idrac9:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 5
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iDRAC9 iDRAC9 is affected by 53 known vulnerabilities: 13 high, 27 medium, 13 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU93513 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2024-6387
CWE-362 High
Available
No
7.00.00.173, 7.10.50.10 01.07.2024 SB2024070144
SB2024070145
SB2024070152
and 89 more
#VU77351 - Improper input validation
CVE-2023-29499
CWE-20 Medium
No
No
7.00.00.172, 7.10.50.00 15.06.2023 SB2023041955
SB2023061510
SB2023080276
and 35 more
#VU75574 - Permissions, Privileges, and Access Controls
CVE-2022-34435
CWE-264 Medium
No
No
6.00.30.00 28.04.2023 SB2023042804
SB2023042805
SB2023081529
#VU69364 - Memory corruption
CVE-2022-44640
CWE-119 High
No
No
6.10.30.20, 6.10.39.00 16.11.2022 SB2022111610
SB2022111621
SB2022112302
and 16 more
#VU66218 - Improper Authentication
CVE-2021-21544
CWE-287 Low
No
No
4.40.00.00 09.08.2022 SB2021043026
SB2022102060
#VU66217 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21543
CWE-79 Medium
No
No
4.40.00.00 09.08.2022 SB2021043026
SB2022102060
#VU66216 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21542
CWE-79 Medium
No
No
4.40.10.00 09.08.2022 SB2021043025
SB2022102060
#VU66214 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21541
CWE-79 Medium
No
No
4.40.40.00 09.08.2022 SB2021043024
SB2022102060
#VU66213 - Stack-based buffer overflow
CVE-2021-21540
CWE-121 Medium
No
No
4.40.40.00 09.08.2022 SB2021043024
SB2022102060
#VU66211 - Improper Authentication
CVE-2021-21538
CWE-287 High
No
No
4.40.10.00 09.08.2022 SB2021043025
#VU66210 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-21581
CWE-79 Medium
No
No
5.00.00.00 09.08.2022 SB2021080333
SB2022111726
SB2023081529
#VU66209 - Improper input validation
CVE-2021-36300
CWE-20 High
No
No
5.00.00.00 09.08.2022 SB2021080333
SB2022111726
SB2023081529
#VU66207 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-36299
CWE-89 Medium
No
No
4.40.29.00, 5.00.00.00 09.08.2022 SB2021112338
SB2022111726
SB2023081529
#VU66177 - Improper Authentication
CVE-2022-24422
CWE-287 High
No
No
5.10.10.00 08.08.2022 SB2022081045
SB2022111419
SB2022111730
and 1 more
#VU66170 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-36348
CWE-74 Medium
No
No
5.00.20.00 08.08.2022 SB2022081044
SB2022092810
SB2023010516
and 1 more
#VU66164 - Stack-based buffer overflow
CVE-2021-36347
CWE-121 Low
No
No
5.00.10.20 08.08.2022 SB2022012658
SB2022092810
SB2023010516
and 1 more
#VU66163 - Improper input validation
CVE-2021-36346
CWE-20 Medium
Available
No
4.40.29.00, 4.40.40.00, 5.00.00.00, 5.00.10.00 08.08.2022 SB2022092810
SB2022111803
SB2023010516
#VU62645 - Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')
CVE-2021-21580
CWE-74 Low
No
No
5.00.00.00 27.04.2022 SB2021080330
SB2022042707
SB2022111726
and 1 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778
CWE-835 Medium
Available
No
5.10.30.00 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU56064 - Out-of-bounds read
CVE-2021-3712
CWE-125 Medium
No
No
4.40.29.00, 4.40.40.00, 5.00.00.00, 5.00.10.00 24.08.2021 SB2021082414
SB2021082508
SB2021082510
and 142 more


Showing elements 21 - 40 out of 53