Lucene search
+L

CVE-2018-1207

🗓️ 23 Mar 2018 14:00:00Reported by dellType 
cve
 cve
🔗 web.nvd.nist.gov👁 242 Views🌐 WEB

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, CGI injection vulnerability

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
githubexploit
GithubExploit
Exploit for Code Injection in Dell Emc_Idrac7
9 Dec 202123:47
–githubexploit
circl
Circl
CVE-2018-1207
17 Apr 202521:02
–circl
cnvd
CNVD
Dell EMC iDRAC7 and iDRAC8 Code Execution Vulnerabilities
27 Mar 201800:00
–cnvd
cvelist
Cvelist
CVE-2018-1207
23 Mar 201814:00
–cvelist
nessus
Tenable Nessus
Dell iDRAC Products Multiple Vulnerabilities (Mar 2018)
20 Apr 201800:00
–nessus
nessus
Tenable Nessus
Dell EMC Code Injection (CVE-2018-1207)
17 Jan 202400:00
–nessus
exploitdb
Exploit DB
Dell EMC iDRAC7/iDRAC8 2.52.52.52 - Remote Code Execution (RCE)
16 Apr 202500:00
–exploitdb
canvas
canvas
Immunity Canvas: IDRAC_APPWEB_RCE
23 Mar 201814:29
–canvas
kitploit
Kitploit
CVE-2018-1207-better
26 Oct 202606:20
–kitploit
kitploit
Kitploit
cve-2018-1207
26 Oct 202619:02
–kitploit
Rows per page
NVD
Node
OR
dellemc_idrac7Range<2.52.52.52
dellemc_idrac8Range<2.52.52.52
ParameterPositionPathDescriptionCWE
LD_DEBUGquery param/cgi-bin/loginCGI injection vulnerability in iDRAC7/iDRAC8 that allows remote code execution via CGI variables.CWE-94
binaryrequest body/cgi-bin/putfileFile upload vulnerability allowing an unauthenticated attacker to upload a shared library for remote code execution.CWE-94
LD_PRELOADquery param/cgi-bin/discoverCGI injection vulnerability allowing the execution of a previously uploaded shared library via the LD_PRELOAD environment variable.CWE-94

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 01:50Current
9.6Critical risk
Vulners AI Score9.6
CVSS 27.5
CVSS 39.8
EPSS0.90091
242