Product by Dell
Dell iDRAC9 Firmware
21 known vulnerabilities in Dell iDRAC9 Firmware (Dell), 0 of them actively exploited (CISA KEV).
Key figures
21
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
5
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2018-1244 | Dell EMC iDRAC7: Command Injection | 8.8 | |
| Critical | CVE-2019-3705 | Buffer Overflow Vulnerability | 8.1 | |
| Critical | CVE-2019-3706 | Web Interface Authentication Bypass Vulnerability | 8.6 | |
| Critical | CVE-2019-3707 | WS-MAN Authentication Bypass Vulnerability | 8.6 | |
| Critical | CVE-2020-5344 | Dell Integrated Dell Remote Access Controller (iDRAC): Stack-based Buffer Overflow | 7.0 | |
| Critical | CVE-2021-21538 | Dell Integrated Dell Remote Access Controller (iDRAC): Improper Authentication | 9.6 | |
| High | CVE-2018-1243 | iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability | 7.5 | |
| High | CVE-2020-5366 | Dell Integrated Dell Remote Access Controller (iDRAC): Path Traversal | 7.1 | |
| High | CVE-2021-21540 | Dell Integrated Dell Remote Access Controller (iDRAC): Stack-based Buffer Overflow | 5.9 | |
| Medium | CVE-2020-26198 | Dell Integrated Dell Remote Access Controller (iDRAC): Cross-site Scripting | 6.1 | |
| Medium | CVE-2018-1249 | Dell EMC iDRAC9: security vulnerability | 6.5 | |
| Medium | CVE-2025-22397 | Dell Integrated Dell Remote Access Controller 9 14G Versions: Path Traversal | 6.7 | |
| Medium | CVE-2021-21541 | Dell Integrated Dell Remote Access Controller (iDRAC): Cross-site Scripting | 6.1 | |
| Medium | CVE-2019-3764 | Dell Integrated Dell Remote Access Controller (iDRAC): Improper Authorization | 5.0 | |
| High | CVE-2021-21539 | Dell Integrated Dell Remote Access Controller (iDRAC): Race Condition | 5.9 | |
| High | CVE-2018-15774 | iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability | 3.8 | |
| Medium | CVE-2021-21543 | Dell Integrated Dell Remote Access Controller (iDRAC): Cross-site Scripting | 4.8 | |
| Low | CVE-2021-21544 | Dell Integrated Dell Remote Access Controller (iDRAC): Client-Side Enforcement of Server-Side Security | 2.7 | |
| Medium | CVE-2025-26482 | Dell iDRAC9: Exposure of Sensitive System Information Due to Uncleared Debug Information | 4.9 | |
| Medium | CVE-2021-21542 | Dell Integrated Dell Remote Access Controller (iDRAC): Cross-site Scripting | 4.8 | |
| Medium | CVE-2022-34435 | Dell Integrated Dell Remote Access Controller 9: Improper Input Validation | 2.7 |