Dell Integrated Remote Access Controller Firmware vulnerabilities

6 CVEs affecting Dell Integrated Remote Access Controller Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-7275, published 2017-04-10.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2015-7272, published 2017-04-10. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via…
• CVE-2015-7271, published 2017-04-10. Critical severity, CVSS 9.8. EPSS: 2.7% chance of exploitation in the next 30 days. Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo.
• CVE-2015-7274, published 2017-04-10. High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days. Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands.
• CVE-2015-7273, published 2017-04-10. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has XXE.
• CVE-2015-7275, published 2017-04-10. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. Dell Integrated Remote Access Controller (iDRAC) 6 before 2.85 and 7/8 before 2.30.30.30 has XSS.
• CVE-2015-7270, published 2017-04-10. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows directory traversal.