Dell EMC iDRAC8 < 2.85.85.85 (DSA-2024-089)

The version of Dell EMC iDRAC8 installed on the remote host is prior to 2.85.85.85. It is, therefore, affected by a command injection vulnerability in local RACADM. A malicious authenticated user could gain control of the underlying operating system. Note that Nessus has not tested for this issue...

Dell EMC iDRAC8 < 2.84.84.84 (DSA-2022-265)

The version of Dell EMC iDRAC8 installed on the remote host is prior to 2.84.84.84. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-265 advisory. - Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware...

Dell EMC iDRAC8 < 2.83.83.83 / Dell EMC iDRAC9 < 5.10.30.00 (DSA-2022-154)

The version of Dell EMC iDRAC8 or Dell EMC iDRAC9 installed on the remote host is prior to 2.83.83.83/5.10.30.00. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-154 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application...

Dell EMC iDRAC8 < 2.83.83.83 (DSA-2022-069)

The version of Dell EMC iDRAC8 installed on the remote host is prior to 2.83.83.83. It is, therefore, affected by a vulnerability as referenced in the DSA-2022-069 advisory. - Dell EMC iDRAC8 versions 2.81.81 and earlier contain a denial of service vulnerability. A remote unauthenticated attacker...

CVE-2022-0778

The BNmodsqrt function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this function is used when parsing certificates that contain elliptic curve public keys in compressed form or explicit elliptic curve parameters with a...

CVE-2021-21580: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Dell EMC iDRAC8 versions prior to 2.80.80.80 & Dell EMC iDRAC9 versions prior to 5.00.00.00 contain a Content spoofing / Text injection, where a malicious URL can inject text to present a customized message on the application that can phish users into believing that the message is legitimate...

CVE-2020-5344: Stack-based Buffer Overflow

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially...

CVE-2019-3764: Improper Authorization

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive...

CVE-2019-3705: Buffer Copy without Checking Size of Input

Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to...

PT-2018-1455

Name of the Vulnerable Software and Affected Versions Dell EMC iDRAC7 versions prior to 2.60.60.60 Dell EMC iDRAC8 versions prior to 2.60.60.60 Dell EMC iDRAC9 versions prior to 3.21.21.21 Description The issue is related to a command injection vulnerability in the SNMP agent of the affected iDRA...

CVE-2018-1243: Improperly Implemented Security Check for Standard

Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers t...