cnvd - cnvd-2021-92453

CNVD-2021-92453

Vulnerability from cnvd - Published: 2021-11-30

Title

Dell EMC iDRAC9 SQL注入漏洞

Description

DELL Dell EMC iDRAC9是美国戴尔（DELL）公司的一套包含硬件和软件的系统管理解决方案。该方案为Dell PowerEdge系统提供远程管理、崩溃系统恢复和电源控制等功能。 Dell EMC iDRAC9 4.40.00.00及之前版本存在SQL注入漏洞，具有低权限的攻击者可利用该漏洞通过向受影响的应用程序提供特制的输入数据来导致信息泄露或拒绝服务。

Severity

中

Patch Name

Dell EMC iDRAC9 SQL注入漏洞的补丁

Patch Description

Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.dell.com/support/kbdoc/en-us/000178050/support-for-dell-emc-idrac-service-module。

Reference

https://nvd.nist.gov/vuln/detail/CVE-2021-36299

Impacted products

Name
DELL Dell EMC iDRAC9 <=4.40.00.00

Show details on source website

JSON

To clipboard

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2021-36299",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2021-36299"
    }
  },
  "description": "DELL Dell EMC iDRAC9\u662f\u7f8e\u56fd\u6234\u5c14\uff08DELL\uff09\u516c\u53f8\u7684\u4e00\u5957\u5305\u542b\u786c\u4ef6\u548c\u8f6f\u4ef6\u7684\u7cfb\u7edf\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u4e3aDell PowerEdge\u7cfb\u7edf\u63d0\u4f9b\u8fdc\u7a0b\u7ba1\u7406\u3001\u5d29\u6e83\u7cfb\u7edf\u6062\u590d\u548c\u7535\u6e90\u63a7\u5236\u7b49\u529f\u80fd\u3002\n\nDell EMC iDRAC9 4.40.00.00\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u5177\u6709\u4f4e\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u63d0\u4f9b\u7279\u5236\u7684\u8f93\u5165\u6570\u636e\u6765\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u6216\u62d2\u7edd\u670d\u52a1\u3002",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.dell.com/support/kbdoc/en-us/000178050/support-for-dell-emc-idrac-service-module\u3002",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2021-92453",
  "openTime": "2021-11-30",
  "patchDescription": "DELL Dell EMC iDRAC9\u662f\u7f8e\u56fd\u6234\u5c14\uff08DELL\uff09\u516c\u53f8\u7684\u4e00\u5957\u5305\u542b\u786c\u4ef6\u548c\u8f6f\u4ef6\u7684\u7cfb\u7edf\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\u3002\u8be5\u65b9\u6848\u4e3aDell PowerEdge\u7cfb\u7edf\u63d0\u4f9b\u8fdc\u7a0b\u7ba1\u7406\u3001\u5d29\u6e83\u7cfb\u7edf\u6062\u590d\u548c\u7535\u6e90\u63a7\u5236\u7b49\u529f\u80fd\u3002\r\n\r\nDell EMC iDRAC9 4.40.00.00\u53ca\u4e4b\u524d\u7248\u672c\u5b58\u5728SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u5177\u6709\u4f4e\u6743\u9650\u7684\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u901a\u8fc7\u5411\u53d7\u5f71\u54cd\u7684\u5e94\u7528\u7a0b\u5e8f\u63d0\u4f9b\u7279\u5236\u7684\u8f93\u5165\u6570\u636e\u6765\u5bfc\u81f4\u4fe1\u606f\u6cc4\u9732\u6216\u62d2\u7edd\u670d\u52a1\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Dell EMC iDRAC9 SQL\u6ce8\u5165\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "DELL Dell EMC iDRAC9 \u003c=4.40.00.00"
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2021-36299",
  "serverity": "\u4e2d",
  "submitTime": "2021-11-12",
  "title": "Dell EMC iDRAC9 SQL\u6ce8\u5165\u6f0f\u6d1e"
}

CVE-2021-36299 (GCVE-0-2021-36299)

Vulnerability from cvelistv5 – Published: 2021-11-23 20:00 – Updated: 2024-09-16 23:36

Summary

Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application.

Severity ?

7.1 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L

CWE

CWE-89 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')

Assigner

dell

References

URL

Tags

https://support.emc.com/kb/000191229

x_refsource_MISC

Impacted products

	Vendor	Product	Version
	Dell	Integrated Dell Remote Access Controller (iDRAC)	Affected: unspecified , < 5.00.00.00 (custom)

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T00:54:51.382Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://support.emc.com/kb/000191229"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Integrated Dell Remote Access Controller (iDRAC)",
          "vendor": "Dell",
          "versions": [
            {
              "lessThan": "5.00.00.00",
              "status": "affected",
              "version": "unspecified",
              "versionType": "custom"
            }
          ]
        }
      ],
      "datePublic": "2021-09-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 7.1,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "LOW",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-89",
              "description": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2021-11-23T20:00:31",
        "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
        "shortName": "dell"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://support.emc.com/kb/000191229"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@dell.com",
          "DATE_PUBLIC": "2021-09-09",
          "ID": "CVE-2021-36299",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Integrated Dell Remote Access Controller (iDRAC)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "\u003c",
                            "version_value": "5.00.00.00"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Dell"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to the affected application."
            }
          ]
        },
        "impact": {
          "cvss": {
            "baseScore": 7.1,
            "baseSeverity": "High",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:L",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\u0027SQL Injection\u0027)"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://support.emc.com/kb/000191229",
              "refsource": "MISC",
              "url": "https://support.emc.com/kb/000191229"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe",
    "assignerShortName": "dell",
    "cveId": "CVE-2021-36299",
    "datePublished": "2021-11-23T20:00:31.814994Z",
    "dateReserved": "2021-07-08T00:00:00",
    "dateUpdated": "2024-09-16T23:36:38.390Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CNVD-2021-92453

CVE-2021-36299 (GCVE-0-2021-36299)

Tags

Sightings

Nomenclature