Approved changes feed: RSS · Atom
cpe:2.3:a:dell_emc:idrac:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9) |
|---|---|
| Product | Idrac (8224bd95-299b-50a9-bea9-80cc11bac592) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-3707 |
vulnerable | 2026-06-08 05:13:55.401945 |
WS-MAN Authentication Bypass Vulnerability
HIGH (8.6)
Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface.
Published: 2019-04-26T18:22:09.049Z
Updated: 2024-09-16T18:09:07.804Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3706 |
vulnerable | 2026-06-08 05:13:55.398617 |
Web Interface Authentication Bypass Vulnerability
HIGH (8.6)
Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.
Published: 2019-04-26T18:22:09.012Z
Updated: 2024-09-17T00:26:34.078Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3705 |
vulnerable | 2026-06-08 05:13:55.395137 |
Buffer Overflow Vulnerability
HIGH (8.1)
Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the webserver or execute arbitrary code on the system with privileges of the webserver by sending specially crafted input data to the affected system.
Published: 2019-04-26T18:22:08.963Z
Updated: 2024-09-16T23:25:37.495Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15776 |
vulnerable | 2026-06-08 05:11:03.592934 |
iDRAC7, iDRAC8 - Improper Error Handling
MEDIUM (6.4)
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.
Published: 2018-12-13T22:00:00.000Z
Updated: 2024-09-16T22:56:03.854Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-15774 |
vulnerable | 2026-06-08 05:11:03.589682 |
iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability
LOW (3.8)
Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access.
Published: 2018-12-13T22:00:00.000Z
Updated: 2024-09-17T01:36:18.120Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.