Skip to content
Sign in
8.1 High

CVE-2019-3705 Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to…

Description

Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the webserver or execute arbitrary code on the system with privileges of the webserver by sending specially crafted input data to the affected system.

Affected products and versions

Product Affected versions Fixed in
iDRAC 3.23 earliest → < 3.23.23.23 3.23.23.23
iDRAC 3.21 earliest → < 3.21.26.22 3.21.24.22
iDRAC 3.20 earliest → < 3.20.21.20 3.20.21.20
iDRAC 2.92 earliest → < 2.92 2.92
iDRAC 2.61 earliest → < 2.61.60.60 2.61.60.60

Other CVEs of iDRAC

The 5 CVEs of iDRAC →
CVE-2019-3706 Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass… 8.6 High CVE-2019-3707 Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability 8.6 High CVE-2018-15774 Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and… 3.8 Low CVE-2018-15776 Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability 6.4 Medium
Track this CVE