CVE-2018-1212: Dell IDRAC6 Modular

High severity, CVSS 8.8. EPSS: 4.3% chance of exploitation in the next 30 days.

The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute arbitrary commands as root on the affected iDRAC system.

Affected products

• Dell IDRAC6 Modular: any version
• Dell IDRAC6 Monolithic: before 2.91 (fixed in 2.91)

Published 2018-07-02. Last modified 2026-06-17.