CVE-2014-8272

CVE-2014-8272 affects Dell iDRAC6 (modular before 3.65; monolithic before 1.98) and iDRAC7 before 1.57.57, where IPMI 1.5 session ID values are not properly randomized or selected, enabling remote attackers to brute-force session IDs and execute arbitrary commands. The vulnerability is remote (ne...

CVE-2018-1212

Dell EMC iDRAC6 Web-based diagnostics console contains a command injection vulnerability (CVE-2018-1212). A remote authenticated iDRAC user with diagnostics console access can potentially execute arbitrary commands as root on affected systems. Affected products: iDRAC6 (Monolithic versions prior ...

CVE-2013-3589

Dell iDRAC6 (monolithic) and iDRAC7 devices are affected by a cross-site scripting (XSS) vulnerability in the Administrative Web Interface login page, exploitable via the ErrorMsg parameter. Affected versions are iDRAC6 firmware before 1.96 and iDRAC7 firmware before 1.46.45. The issue allows rem...