メイン コンテンツに進む
  • すばやく簡単にご注文が可能
  • 注文内容の表示、配送状況をトラック
  • 会員限定の特典や割引のご利用
  • 製品リストの作成とアクセスが可能

DSA-2021-082: Dell iDRAC 9 Security Update for Improper Authentication Vulnerability

概要: Dell iDRAC 9 contains remediation for an improper authentication vulnerability that may be exploited by malicious users to compromise the affected system.

この記事は次に適用されます:   この記事は次には適用されません: 

影響

Critical

詳細

Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21538 Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the virtual console. 9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
Proprietary Code CVE(s) Description CVSS Base Score CVSS Vector String
CVE-2021-21538 Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the virtual console. 9.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L
デル・テクノロジーズでは、すべてのお客様に対して、CVSSベース スコアに加えて、特定のセキュリティの脆弱性に付随する潜在的な重要度に影響する可能性のある現状スコアや環境スコアも考慮することをお勧めしています。

影響を受ける製品と修復

Product Affected Version(s) Updated Version(s) Link to Update
iDRAC9 Versions 4.40.00.00 and later, but prior to 4.40.10.00 4.40.10.00 Customers can download software, including the latest release of iDRAC firmware, from the Dell Support site at https://www.dell.com/support/home/

Customers can find the iDRAC documentation from the Dell EMC Support site at www.dell.com/idracmanuals
 
Product Affected Version(s) Updated Version(s) Link to Update
iDRAC9 Versions 4.40.00.00 and later, but prior to 4.40.10.00 4.40.10.00 Customers can download software, including the latest release of iDRAC firmware, from the Dell Support site at https://www.dell.com/support/home/

Customers can find the iDRAC documentation from the Dell EMC Support site at www.dell.com/idracmanuals
 

変更履歴

RevisionDateDescription
1.02021-05-10Initial Release

関連情報

対象製品

iDRAC9, iDRAC9 - 4.xx Series, Product Security Information