Skip to content
Sign in
6.5 Medium

CVE-2018-1249 Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for…

Description

Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client and a server.

Affected products and versions

Product Affected versions Fixed in
iDRAC9 3.21 earliest → < 3.21.21.21 3.21.21.21

Other CVEs of iDRAC9

The 2 CVEs of iDRAC9 →
CVE-2018-1244 Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command… 8.8 High
Track this CVE