CVE-2020-5344

🗓️ 31 Mar 2020 21:30:13Reported by dellType

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data

Reporter	Title	Published	Views	Family All 7
CNVD	Dell EMC iDRAC7, iDRAC8 and iDRAC9 Buffer Overflow Vulnerabilities	1 Apr 202000:00	–	cnvd
Cvelist	CVE-2020-5344	31 Mar 202021:30	–	cvelist
Tenable Nessus	Dell iDRAC Buffer Overflow Vulnerability (CVE-2020-5344)	3 Apr 202000:00	–	nessus
Tenable Nessus	Dell iDRAC7 Out-of-bounds Write (CVE-2020-5344)	17 Jan 202400:00	–	nessus
EUVD	EUVD-2020-26526	7 Oct 202500:30	–	euvd
NVD	CVE-2020-5344	31 Mar 202022:15	–	nvd
Prion	Stack overflow	31 Mar 202022:15	–	prion

NVD

Vulners

Node

dell idrac7_firmwareRange<2.65.65.65

AND

dell idrac7Match-

Node

dell idrac8_firmwareRange<2.70.70.70

AND

dell idrac8Match-

Node

dell idrac9_firmwareRange<4.00.00.00

AND

dell idrac9Match-

[
  {
    "product": "Integrated Dell Remote Access Controller (iDRAC)",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "2.65.65.65",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/article/en-us/sln320717/dsa-2020-063-idrac-buffer-overflow-vulnerability

21 Nov 2024 05:33Current

9.9High risk

Vulners AI Score9.9

CVSS 3.17 - 9.8

CVSS 210

EPSS0.04115