Stack-based buffer overflow in Dell iDRAC9 and Dell iDRAC8

1) Stack-based buffer overflow

EUVDB-ID: #VU66164

Risk: Low

CVSSv4.0: 6.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Clear]

CVE-ID: CVE-2021-36347

CWE-ID: CWE-121 - Stack-based buffer overflow

Exploit availability: No

Description

The vulnerability allows a remote user to execute arbitrary code on the target system.

The vulnerability exists due to a boundary error. An authenticated remote user with high privileges can exploit this vulnerability to control process execution and gain access to the iDRAC operating system.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

iDRAC9: before 5.00.10.20

iDRAC8: before 2.82.82.82

CPE2.3

• cpe:2.3:a:dell:idrac9:*:*:*:*:*:*:*:*
• cpe:2.3:a:dell:idrac8:*:*:*:*:*:*:*:*

External links

https://www.dell.com/support/kbdoc/000194038

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated privileged user via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.