Skip to content
OpenAdvisories
Medium · 6.1 CVE-2021-21510 EUVD-2021-8782GHSA-xxm9-gr2r-5m67

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially …

Published Mar 8, 2021 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections.

Affected products

VendorProductAffectedFixed
Dell Integrated Dell Remote Access Controller (iDRAC) unspecified – < 2.75.100.75 2.75.100.75

References