Dell EMC iDRAC9 and EMC iDRAC8 Spoofing Vulnerability

Dell EMC iDRAC9 is the United States Dell (DELL) company’s set of hardware and software system management solutions. The solution provides remote management, crash system recovery and power control for Dell PowerEdge systems.Dell EMC iDRAC8 versions prior to 2.80.80.80 and Dell EMC iDRAC9 versions prior to 5.00.00.00 are vulnerable to spoofing. A remote attacker can exploit the vulnerability with a malicious URL to inject text to display a custom message on the application, thereby convincing the user of the legitimacy of the message.