← CVE Intelligence

CVE-2018-1212

Authenticated remote code execution in iDRAC 6 PUBLISHED

Description (CNA)

The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute arbitrary commands as root on the affected iDRAC system.

Affected (CNA)

Vendor / productVersions
Dell EMC / iDRAC6 (Monolithic)affected unspecified before 2.91
Dell EMC / iDRAC6 (Modular)affected unspecified through 3.85

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.