Vulnerability · Published May 6, 2021 · Assigned by dell
CVE-2021-21505
High 8.0
In plain English
A high-severity security flaw in Dell EMC Integrated System for Microsoft Azure Stack Hub from Dell. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.4% (higher than 84% of all known vulnerabilities).
Severity (CVSS 3.1)8.0High
Exploit odds (30 days)2.4%top 16.0% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Dell EMC Integrated System for Microsoft Azure Stack Hub, versions 1906 – 2011, contain an undocumented default iDRAC account. A remote unauthenticated attacker, with the knowledge of the default credentials, could potentially exploit this to log in to the system to gain root privileges.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Dell | Dell EMC Integrated System for Microsoft Azure Stack Hub | unspecified – before 2102 |
Weakness: CWE-255 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H