Vulnerabilities

TI-2022-15333 CVE-2022-34436

Improper input validation in Dell Integrated Dell Remote Access Controller 8

LOW 23

Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set.

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00505 Published 2023-01-18 No fix listed CWE-20

TI-2021-04601 CVE-2021-21510 · GHSA-xxm9-gr2r-5m67

Improper input validation in Dell Integrated Dell Remote Access Controller

LOW 29

Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01026 Published 2021-03-08 Fixed in 2.75.100.75 CWE-20

TI-2020-04396 CVE-2020-5344 · GHSA-cxcf-v498-h2h8

Stack-based buffer overflow in Dell Integrated Dell Remote Access Controller

MEDIUM 49

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03842 Published 2020-03-31 Fixed in 2.65.65.65 CWE-121

TI-2019-02779 CVE-2019-3764 · GHSA-p6v4-55x8-jc35

Improper authorization in Dell Integrated Dell Remote Access Controller

LOW 22

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.00882 Published 2019-11-07 Fixed in iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70 +1 CWE-285

TI-2019-02726 CVE-2019-3705 · GHSA-76h7-m86v-wq78

Buffer overflow in Dell EMC iDRAC

MEDIUM 49

Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04173 Published 2019-04-26 Fixed in 2.92, 2.61.60.60 +4 CWE-120

TI-2018-11253 CVE-2018-15776 · GHSA-mxf4-pj52-3wwr

iDRAC7, iDRAC8 - Improper Error Handling

LOW 30

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00416 Published 2018-12-13 Fixed in 2.61.60.60

TI-2018-11252 CVE-2018-15774 · GHSA-rx2m-34rg-7763

iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability

MEDIUM 40

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.00941 Published 2018-12-13 Fixed in 2.61.60.60, 3.20.21.20 +1 CWE-863

TI-2018-01149 CVE-2018-1244 · GHSA-w83g-5rm5-96mx

iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.

MEDIUM 44

Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.03306 Published 2018-07-02 Fixed in 2.60.60.60, 3.21.21.21 CWE-77

TI-2018-01148 CVE-2018-1243 · GHSA-h4v5-gmcm-p2xx

iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability

LOW 36

Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability.

CVSS 3.0HIGH 7.5 Network Low privileges No interaction EPSS 0.01818 Published 2018-07-02 Fixed in 2.91, 2.60.60.60 CWE-358

TI-2016-04940 CVE-2016-5685 · GHSA-gcff-q869-4j4x

Injection in Dell EMC iDRAC7 and iDRAC8

MEDIUM 42

Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injection.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.01757 Published 2016-11-29 No fix listed CWE-74

Vulnerabilities

Filters