Skip to content
OpenAdvisories
Medium · 6.4 CVE-2018-15776 EUVD-2018-7639GHSA-mxf4-pj52-3wwr

iDRAC7, iDRAC8 - Improper Error Handling

Published Dec 13, 2018 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.

Affected products

VendorProductAffectedFixed
Dell EMC iDRAC iDRAC7 – < 2.61.60.60, iDRAC8 – < 2.61.60.60 2.61.60.60

References