← CVE Intelligence

CVE-2019-3764

Dell / Integrated Dell Remote Access Controller (iDRAC) PUBLISHED

Description (CNA)

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive information such as password hashes.

Affected (CNA)

Vendor / productVersions
Dell / Integrated Dell Remote Access Controller (iDRAC)affected unspecified before iDRAC7: 2.65.65.65, iDRAC8: 2.70.70.70, iDRAC9: 3.40.40.40 and 3.36.36.36

CWE

CWE-285

References

ADP enrichment

CVE

No English description supplied.