CVE-2021-21510 — Dell / Integrated Dell Remote Access Controller (iDRAC)

CVE-2021-21510

Dell / Integrated Dell Remote Access Controller (iDRAC) PUBLISHED

Description (CNA)

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections.

Affected (CNA)

Vendor / product	Versions
Dell / Integrated Dell Remote Access Controller (iDRAC)	affected unspecified before 2.75.100.75

CWE

CWE-20

References

https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability

ADP enrichment

CVE

No English description supplied.

https://www.dell.com/support/kbdoc/en-us/000183758/dsa-2021-041-dell-emc-idrac-8-security-update-for-a-host-header-injection-vulnerability