GCVE - cpe:2.3:h:dell:idrac8:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:dell:idrac8:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Dell (`dd4951dd-3d72-5089-9da1-f25e0dc3cae3`)
Product	Idrac8 (`dcf9ef12-bacf-53ba-8492-5ce44f47372d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34436`	not_vulnerable	2026-06-08 05:44:53.529649	Details available LOW (2.7) Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update. Published: 2023-01-18T11:15:59.232Z Updated: 2025-04-03T18:07:19.547Z Open on db.gcve.eu Reference links https://www.dell.com/support/kbdoc/en-us/000205346/dsa-2022-265-dell-idrac8-and-dell-idrac9-security-update-for-a-racadm-vulnerability	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5344`	not_vulnerable	2026-06-08 05:26:42.198505	Details available HIGH (7) Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data. Published: 2020-03-31T21:30:13.281Z Updated: 2024-09-17T02:02:37.472Z Open on db.gcve.eu Reference links https://www.dell.com/support/article/en-us/sln320717/dsa-2020-063-idrac-buffer-overflow-vulnerability?lang=en	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-5685`	not_vulnerable	2026-06-08 05:07:57.486125	Details available Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injection. Published: 2016-11-29T15:00:00.000Z Updated: 2024-08-06T01:08:00.545Z Open on db.gcve.eu Reference links http://en.community.dell.com/techcenter/extras/m/white_papers/20443326 http://www.securityfocus.com/bid/94585	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.