DSA-2021-041: Dell iDRAC 8 Security Update for a host header injection vulnerability.
概要: DSA-2021-041: Dell iDRAC 8 Security Update for a host header injection vulnerability.
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Medium
詳細
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21510 | Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections. | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String |
| CVE-2021-21510 | Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections. | 6.1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
影響を受ける製品と修復
| Product | Affected Version(s) | Updated Version(s) | CVE | Link to Update |
| iDRAC8 | Versions prior to 2.75.100.75 | Dell iDRAC8 2.75.100.75 | CVE-2021-21510 | Customers can download software, including the latest release of iDRAC firmware, from the Dell Support site at https://www.dell.com/support/home/ Customers can find the iDRAC documentation from the Dell EMC Support site at www.dell.com/idracmanuals |
| Product | Affected Version(s) | Updated Version(s) | CVE | Link to Update |
| iDRAC8 | Versions prior to 2.75.100.75 | Dell iDRAC8 2.75.100.75 | CVE-2021-21510 | Customers can download software, including the latest release of iDRAC firmware, from the Dell Support site at https://www.dell.com/support/home/ Customers can find the iDRAC documentation from the Dell EMC Support site at www.dell.com/idracmanuals |
変更履歴
| Revision | Date | Description |
| 1.0 | 2021-03-04 | Initial Release |
確認
CVE-2021-21510: Dell would like to thank Ken Pyle from CYBIR for reporting this vulnerability.
関連情報
法的免責事項
対象製品
iDRAC8, iDRAC8 with Lifecycle Controller Version 2.12.12.12, iDRAC8 with Lifecycle Controller Version 2.14.14.12, iDRAC8 with Lifecycle Controller Version 2.17.17.13, iDRAC8 with Lifecycle Controller Version 2.18.17.13
, iDRAC8 with Lifecycle Controller Version 2.30.119.30, iDRAC8 with Lifecycle Controller Version 2.35.35.35, iDRAC8 with Lifecycle Controller Version 2.42.110.40, iDRAC8 with Lifecycle Controller Version 2.45.45.40, iDRAC8 with Lifecycle Controller Version 2.55.55.50, iDRAC8 with Lifecycle Controller version 2.70.70.70, iDRAC8 with Lifecycle Controller version 2.75.75.75, iDRAC8 with Lifecycle Controller Version 2.04.02.01, iDRAC8 with Lifecycle Controller Version 2.05.05.05, iDRAC8 with Lifecycle Controller Version 2.23.23.21, iDRAC8 with Lifecycle Controller Version 2.00.00.00, iDRAC8 with Lifecycle Controller Version 2.02.01.01, Product Security Information
...
文書のプロパティ
文書番号: 000183758
文書の種類: Dell Security Advisory
最終更新: 23 11月 2021
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。