Aller au contenu
Se connecter
3.8 Faible

CVE-2018-15774 Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and…

Description

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access.

Produits et versions touchés

Produit Versions touchées Corrigé en
iDRAC 3.23 premières → < 3.23.23.23 3.23.23.23
iDRAC 3.20 premières → < 3.20.21.20 3.20.21.20
iDRAC 2.61 premières → < 2.61.60.60 2.61.60.60

Autres CVE de iDRAC

Les 5 CVE de iDRAC →
CVE-2019-3706 Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass… 8.6 Élevée CVE-2019-3707 Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability 8.6 Élevée CVE-2019-3705 Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to… 8.1 Élevée CVE-2018-15776 Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability 6.4 Moyenne
Suivre cette CVE