Approved changes feed: RSS · Atom
cpe:2.3:a:dell_emc:idrac9:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Dell Emc (aa27910a-076f-50ea-a256-1da4f35e48f9) |
|---|---|
| Product | Idrac9 (14a9f9d9-c577-547c-9bd8-af997afcd4df) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2018-1249 |
vulnerable | 2026-06-08 05:11:17.258194 |
iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs
MEDIUM (6.5)
Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client and a server.
Published: 2018-07-02T17:00:00.000Z
Updated: 2024-09-17T03:19:03.618Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1244 |
vulnerable | 2026-06-08 05:11:17.249744 |
iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.
HIGH (8.8)
Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary commands on the iDRAC where SNMP alerting is enabled.
Published: 2018-07-02T17:00:00.000Z
Updated: 2024-09-16T16:53:27.629Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.