CVE-2018-1212
Authenticated remote code execution in iDRAC 6
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Authenticated remote code execution in iDRAC 6
| Assigner | dell |
| Reserved | 2017-12-06 |
| Published | 2018-07-02 |
| Updated | 2024-09-17 |
The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute arbitrary commands as root on the affected iDRAC system.
| CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H |
Dell EMC would like to thank Arseniy for reporting this issue to us.
http://en.community.dell.com/techcenter/extras/m/white_papers/20487494
