CVE-2018-1207

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code.

Affected products

Idrac7, Idrac8

Dell Emc idrac7

< 2.52.52.52

Dell Emc idrac8

< 2.52.52.52

Fix

Available

CVSS 3.0

9.8 CRITICAL

EPSS

90.1% (100th percentile)

Weakness

CWE-94

NVD status

Modified

Published

2018-03-23