Skip to content
Sign in
8.8 High

CVE-2018-1244 Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command…

Description

Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary commands on the iDRAC where SNMP alerting is enabled.

Affected products and versions

Product Affected versions Fixed in
iDRAC7 2.60 earliest → < 2.60.60.60 2.60.60.60
iDRAC8 2.60 earliest → < 2.60.60.60 2.60.60.60
iDRAC9 3.21 earliest → < 3.21.21.21 3.21.21.21

Other CVEs of iDRAC7

The 2 CVEs of iDRAC7 →
CVE-2018-1243 Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to… 7.5 High
Track this CVE