exploitDog

CVE-2015-7274

Опубликовано: 10 апр. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.5

EPSS Низкий

Описание

Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands.

Ссылки

http://en.community.dell.com/techcenter/extras/m/white_papers/20441859
Vendor Advisory
http://www.securityfocus.com/bid/97545
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97546
Third Party Advisory
VDB Entry
http://en.community.dell.com/techcenter/extras/m/white_papers/20441859
Vendor Advisory
http://www.securityfocus.com/bid/97545
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/97546
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:dell:integrated_remote_access_controller_firmware:*:*:*:*:*:*:*:*

Версия до 1.99 (включая)

cpe:2.3:h:dell:integrated_remote_access_controller_6:-:*:*:*:*:*:*:*

EPSS

Процентиль: 84%

0.02297

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-9h3f-62vv-w9f3

CVSS3: 8.8

github

больше 3 лет назад

Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands.

EPSS

Процентиль: 84%

0.02297

Низкий

8.8 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-264