CVE-2018-1211

2018-03-2000:00:00

dell

www.cve.org

7.5 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.8%

JSON

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server’s URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by querying specific URI strings.

CNA Affected

[
  {
    "product": "iDRAC7/iDRAC8",
    "vendor": "Dell EMC",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 2.52.52.52"
      }
    ]
  }
]

References

en.community.dell.com/techcenter/extras/m/white_papers/20485410