CVE-2018-1207

Опубликовано: 23 мар. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Критический

Описание

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code.

Ссылки

http://en.community.dell.com/techcenter/extras/m/white_papers/20485410
Vendor Advisory
http://www.securityfocus.com/bid/103694
Third Party Advisory
VDB Entry
https://twitter.com/nicowaisman/status/977279766792466432
Third Party Advisory
http://en.community.dell.com/techcenter/extras/m/white_papers/20485410
Vendor Advisory
http://www.securityfocus.com/bid/103694
Third Party Advisory
VDB Entry
https://twitter.com/nicowaisman/status/977279766792466432
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:dell:emc_idrac7:*:*:*:*:*:*:*:*

Версия до 2.52.52.52 (исключая)

cpe:2.3:a:dell:emc_idrac8:*:*:*:*:*:*:*:*

Версия до 2.52.52.52 (исключая)

EPSS

Процентиль: 100%

0.9379

Критический

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-94

Связанные уязвимости

GHSA-vm2f-3gpj-98m4