Dell Emc IDRAC8 vulnerabilities

2 CVEs affecting Dell Emc IDRAC8, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-1211, published 2018-03-23.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-1207, published 2018-03-23. Critical severity, CVSS 9.8. EPSS: 90.1% chance of exploitation in the next 30 days. Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use…
• CVE-2018-1211, published 2018-03-23. High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days. Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without…