Files
CVEs-PoC/2021/CVE-2021-21579.md
2025-09-29 21:09:30 +02:00

20 lines
924 B
Markdown

### [CVE-2021-21579](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-21579)
![](https://img.shields.io/static/v1?label=Product&message=Integrated%20Dell%20Remote%20Access%20Controller%20(iDRAC)&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=unspecified%20&color=brightgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-601%3A%20URL%20Redirection%20to%20Untrusted%20Site%20('Open%20Redirect')&color=brightgreen)
### Description
Dell EMC iDRAC9 versions prior to 4.40.40.00 contain an open redirect vulnerability. A remote unauthenticated attacker may exploit this vulnerability to redirect users to arbitrary web URLs by tricking the victim users to click on maliciously crafted links.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/chnzzh/iDRAC-CVE-lib
- https://github.com/kaje11/CVEs