CVE-2018-1211
High
Description
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by querying specific URI strings.
SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Emc
PublishedMar 23, 2018
First seenMar 23, 2018
How to fix
Update
- dell emc_idrac72.52.52.52 or later
- dell emc_idrac82.52.52.52 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell emc_idrac7 | v < 2.52.52.52 | 2.52.52.52 |
| dell emc_idrac8 | v < 2.52.52.52 | 2.52.52.52 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.