6.4
Medium
CVE-2018-15776 Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability
Description
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iDRAC 2.61 | earliest → < 2.61.60.60 | 2.61.60.60 |
Other CVEs of iDRAC
The 5 CVEs of iDRAC →
CVE-2019-3706
Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass…
8.6
High
CVE-2019-3707
Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability
8.6
High
CVE-2019-3705
Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to…
8.1
High
CVE-2018-15774
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and…
3.8
Low