HIGH🇵🇱 Wersja polska

CVE-2020-5344

CVSS 7.0v3.1pub. 2020-03-31upd. 2024-11-21

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.

CVSS Vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

  • Dell Idrac7

    HW
    Dell
    wszystkie wersje

  • Dell Idrac7 Firmware

    OS
    Dell
    < 2.65.65.65

  • Dell Idrac8

    HW
    Dell
    wszystkie wersje

  • Dell Idrac8 Firmware

    OS
    Dell
    < 2.70.70.70

  • Dell Idrac9

    HW
    Dell
    wszystkie wersje

  • Dell Idrac9 Firmware

    OS
    Dell
    < 4.00.00.00
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
RCEMemory
CWE
References

Related vulnerabilities

CVE-2022-24422CRITICAL9.6ten sam produkt

Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerab...

CVE-2021-21538CRITICAL9.6ten sam produkt

Dell EMC iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.10.00, contain an improper authentication vul...

CVE-2019-3705CRITICAL9.8ten sam produkt

Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior ...

CVE-2024-25943HIGH7.6ten sam produkt

iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contai...

CVE-2024-25951HIGH8.0ten sam produkt

A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of...