DSA-2021-082: Dell iDRAC 9 Security Update for Improper Authentication Vulnerability
概要: Dell iDRAC 9 contains remediation for an improper authentication vulnerability that may be exploited by malicious users to compromise the affected system.
この記事は次に適用されます：
この記事は次には適用されません：
この記事は、特定の製品に関連付けられていません。
すべての製品パージョンがこの記事に記載されているわけではありません。
影響
Critical
詳細
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String | |
| CVE-2021-21538 | Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the virtual console. | 9.6 |
|
| Proprietary Code CVE(s) | Description | CVSS Base Score | CVSS Vector String | |
| CVE-2021-21538 | Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the virtual console. | 9.6 |
|
影響を受ける製品と修復
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
| iDRAC9 | Versions 4.40.00.00 and later, but prior to 4.40.10.00 | 4.40.10.00 | Customers can download software, including the latest release of iDRAC firmware, from the Dell Support site at https://www.dell.com/support/home/ Customers can find the iDRAC documentation from the Dell EMC Support site at www.dell.com/idracmanuals |
| Product | Affected Version(s) | Updated Version(s) | Link to Update |
| iDRAC9 | Versions 4.40.00.00 and later, but prior to 4.40.10.00 | 4.40.10.00 | Customers can download software, including the latest release of iDRAC firmware, from the Dell Support site at https://www.dell.com/support/home/ Customers can find the iDRAC documentation from the Dell EMC Support site at www.dell.com/idracmanuals |
変更履歴
| Revision | Date | Description |
| 1.0 | 2021-05-10 | Initial Release |
関連情報
法的免責事項
対象製品
iDRAC9, iDRAC9 - 4.xx Series, Product Security Information文書のプロパティ
文書番号: 000186420
文書の種類: Dell Security Advisory
最終更新: 10 5月 2021
質問に対する他のDellユーザーからの回答を見つける
サポート サービス
お使いのデバイスがサポート サービスの対象かどうかを確認してください。