CVE-2018-1211

2018-03-2314:00:00

dell

www.cve.org

AI Score

7.5

Confidence

High

EPSS

0.003

Percentile

70.7%

JSON

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server’s URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by querying specific URI strings.

CNA Affected

[
  {
    "product": "iDRAC7/iDRAC8",
    "vendor": "Dell EMC",
    "versions": [
      {
        "status": "affected",
        "version": "versions prior to 2.52.52.52"
      }
    ]
  }
]

References

en.community.dell.com/techcenter/extras/m/white_papers/20485410