CVE-2018-1212

Dell EMC iDRAC6 Web-based diagnostics console contains a command injection vulnerability (CVE-2018-1212). A remote authenticated iDRAC user with diagnostics console access can potentially execute arbitrary commands as root on affected systems. Affected products: iDRAC6 (Monolithic versions prior ...