Skip to content
OpenAdvisories
High · 8.6 CVE-2019-3707 EUVD-2019-13342GHSA-hhjr-5h5v-4hr4

WS-MAN Authentication Bypass Vulnerability

Published Apr 26, 2019 · Updated Sep 16, 2024 · Assigned by dell

Description

Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface.

Affected products

VendorProductAffectedFixed
Dell EMC iDRAC 3.30.30.30 – < 3.30.30.30 3.30.30.30

References