Priority MEDIUM 49
Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03842 · Published 2020-03-31 · Fixed in 2.65.65.65 CWE-121
Priority MEDIUM 49
Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04173 · Published 2019-04-26 · Fixed in 2.92, 2.61.60.60 +4 CWE-120
Priority MEDIUM 48
Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03308 · Published 2019-04-26 · Fixed in 3.30.30.30
Priority MEDIUM 48
Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability.
CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.03308 · Published 2019-04-26 · Fixed in 3.24.24.24, 3.21.26.22 +2
Priority MEDIUM 46
Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vulnerability.
CVSS 3.1CRITICAL 10.0· Network · No auth · No interaction · EPSS 0.01499 · Published 2021-07-29 · Fixed in 4.40.10.00 CWE-287
Priority MEDIUM 44
Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.03428 · Published 2018-07-02 · Fixed in 2.60.60.60, 3.21.21.21 CWE-77
Priority MEDIUM 40
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability.
CVSS 3.0HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00941 · Published 2018-12-13 · Fixed in 2.61.60.60, 3.20.21.20 +1 CWE-863
Priority LOW 38
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a stack-based overflow vulnerability.
CVSS 3.1HIGH 8.1· Network · Low privileges · No interaction · EPSS 0.01155 · Published 2021-04-30 · Fixed in 4.40.00.00 CWE-121
Priority LOW 36
Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability.
CVSS 3.0HIGH 7.5· Network · Low privileges · No interaction · EPSS 0.01818 · Published 2018-07-02 · Fixed in 2.91, 2.60.60.60 CWE-358
Priority LOW 35
Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability.
CVSS 3.1HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01808 · Published 2020-07-09 · Fixed in 4.20.20.20 CWE-22
Priority LOW 32
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a Time-of-check Time-of-use (TOCTOU) race condition vulnerability.
CVSS 3.1HIGH 7.1· Network · Low privileges · User interaction · EPSS 0.00616 · Published 2021-04-30 · Fixed in 4.40.00.00 CWE-367
Priority LOW 31
Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs.
CVSS 3.0MEDIUM 6.5· Network · No auth · No interaction · EPSS 0.00891 · Published 2018-07-02 · Fixed in 3.21.21.21
Priority LOW 30
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.0…
CVSS 3.1MEDIUM 6.7· Network · High privileges · No interaction · EPSS 0.00461 · Published 2025-11-06 · Fixed in 7.00.00.181, 7.20.10.50 +1 CWE-22
Priority LOW 29
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain a DOM-based cross-site scripting vulnerability.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00813 · Published 2021-04-30 · Fixed in 4.40.00.00 CWE-79
Priority LOW 29
Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerability in the iDRAC9 web application.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.01003 · Published 2020-12-16 · Fixed in 4.32.10.00 and 4.40.00.00 CWE-79
Priority LOW 23
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00528 · Published 2023-01-18 · No fix listed CWE-20
Priority LOW 23
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain multiple stored cross-site scripting vulnerabilities.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00628 · Published 2021-04-30 · Fixed in 4.40.00.00 CWE-79
Priority LOW 22
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability.
CVSS 3.1MEDIUM 4.9· Network · High privileges · No interaction · EPSS 0.00304 · Published 2025-09-25 · Fixed in 1.2.6, 1.1.2 +15 CWE-1258
Priority LOW 22
Dell EMC iDRAC9 versions prior to 4.40.10.00 contain multiple stored cross-site scripting vulnerabilities.
CVSS 3.1MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00397 · Published 2021-04-30 · Fixed in 4.40.10.00 CWE-79
Priority LOW 22
Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability.
CVSS 3.1MEDIUM 4.3· Network · Low privileges · No interaction · EPSS 0.00882 · Published 2019-11-07 · Fixed in iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70 +1 CWE-285
Priority LOW 15
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability.
CVSS 3.1LOW 2.7· Network · High privileges · No interaction · EPSS 0.00921 · Published 2021-04-30 · Fixed in 4.40.00.00 CWE-602
THREATIST.IORead the docs