Idrac6 Firmware
Approved changes feed: RSS · Atom
cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Dell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3) |
|---|---|
| Product | Idrac6 Firmware (cae40492-8f47-5be6-a779-d9585f48140c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3705 |
vulnerable | 2026-06-08 05:13:55.395859 |
Buffer Overflow Vulnerability
HIGH (8.1)
Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the webserver or execute arbitrary code on the system with privileges of the webserver by sending specially crafted input data to the affected system.
Published: 2019-04-26T18:22:08.963Z
Updated: 2024-09-16T23:25:37.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1243 |
vulnerable | 2026-06-08 05:11:17.245995 |
iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability
HIGH (7.5)
Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.
Published: 2018-07-02T17:00:00.000Z
Updated: 2024-09-16T19:20:22.599Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-3589 |
vulnerable | 2026-06-08 05:04:32.140314 |
Details available
Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.
Published: 2013-09-24T10:00:00.000Z
Updated: 2024-09-16T18:23:58.443Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.