Описание
Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 2.84.84.84 (исключая)
Одновременно
cpe:2.3:o:dell:idrac8_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:dell:idrac8:-:*:*:*:*:*:*:*
EPSS
Процентиль: 37%
0.00159
Низкий
2.7 Low
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-20
CWE-20
EPSS
Процентиль: 37%
0.00159
Низкий
2.7 Low
CVSS3
4.9 Medium
CVSS3
Дефекты
CWE-20
CWE-20