CVE-2015-7270

Dell iDRAC6/7/8 are affected by a local directory traversal vulnerability that could lead to information disclosure and unauthorized operations. Affected versions are iDRAC6 before 2.80 and iDRAC7/8 before 2.21.21.21. The root cause is directory traversal in the iDRAC web interface/remote managem...

CVE-2015-7274

CVE-2015-7274 affects Dell iDRAC6 prior to version 2.80. The vulnerability allows remote attackers to execute arbitrary administrative HTTP commands. No exploits or mitigation details are provided in the connected documents; remediation status not stated.

CVE-2015-7273

CVE-2015-7273 affects Dell iDRAC 7/8 prior to 2.21.21.21. The records indicate an XML External Entity (XXE) issue, with the NVD entry describing XXE and CNVD listing a cross-site scripting (XSS) vulnerability for the same versions. No public exploit details or remediation are provided in the supp...

CVE-2015-7271

Dell iDRAC7/8 (before 2.21.21.21) is affected by a format-string issue in racadm getsystinfo. The vulnerability could allow a remote attacker to execute arbitrary code or cause a denial of service on affected devices (impacting confidentiality, integrity, and availability). Dell released fixed ve...

CVE-2015-7275

Dell iDRAC (Integrated Remote Access Controller) 6 before 2.85 and 7/8 before 2.30.30.30 are vulnerable to cross-site scripting (XSS) via the web interface. The root cause is an XSS flaw in the iDRAC web UI that enables injection of arbitrary HTML/JavaScript by an attacker over the network. Impac...

CVE-2015-7272

Dell iDRAC vulnerability CVE-2015-7272 affects Dell Integrated Remote Access Controller (iDRAC) 6 (prior to 2.80) and 7/8 (prior to 2.21.21.21). The issue is a buffer overflow triggered by a long SSH username or input, leading to denial of service and potentially other unspecified impact. Remedia...