Idrac9 Firmware (Dell) - vulnerabilities (CVEs)
21 CVEs, 0 in the last 30 days, 33 known versions, newest CVE from 2025-11-06. Vendor: Dell.
CVEs of Idrac9 Firmware
- CVE-2025-22397 - CVSS 6.7 (medium), 2025-11-06: Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated…
- CVE-2025-26482 - CVSS 4.9 (medium), 2025-09-25: Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access…
- CVE-2022-34435 - CVSS 4.9 (medium), 2023-01-18: Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A…
- CVE-2021-21538 - CVSS 10 (critical), 2021-07-29: Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker…
- CVE-2021-21541 - CVSS 6.1 (medium), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability. A remote unauthenticated attacker could potentially…
- CVE-2021-21544 - CVSS 2.7 (low), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges…
- CVE-2021-21540 - CVSS 8.1 (high), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability. A remote authenticated attacker could potentially exploit this…
- CVE-2021-21543 - CVSS 4.8 (medium), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high…
- CVE-2021-21539 - CVSS 7.1 (high), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability. A remote authenticated attacker could…
- CVE-2021-21542 - CVSS 4.8 (medium), 2021-04-30: Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities. A remote authenticated malicious user with high…
- CVE-2020-26198 - CVSS 6.1 (medium), 2020-12-16: Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application. A remote…
- CVE-2020-5366 - CVSS 7.1 (high), 2020-07-09: Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could…
- CVE-2020-5344 - CVSS 9.8 (critical), 2020-03-31: Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An…
- CVE-2019-3764 - CVSS 5 (medium), 2019-11-07: Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization…
- CVE-2019-3707 - CVSS 9.8 (critical), 2019-04-26: Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to…
- CVE-2019-3706 - CVSS 9.8 (critical), 2019-04-26: Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may…
- CVE-2019-3705 - CVSS 9.8 (critical), 2019-04-26: Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and…
- CVE-2018-15774 - CVSS 8.8 (high), 2018-12-13: Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege…
- CVE-2018-1243 - CVSS 7.5 (high), 2018-07-02: Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID…
- CVE-2018-1249 - CVSS 6.5 (medium), 2018-07-02: Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle…
- CVE-2018-1244 - CVSS 8.8 (high), 2018-07-02: Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A…
