Idrac6 Modular

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-1212 Jul 02, 17:29 HIGH This Week

The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

Command Injection Dell Idrac6 Monolithic Idrac6 Modular

NVD

CVSS 3.0

8.8

EPSS

4.3%

CVE-2014-8272 Dec 19, 11:59 MEDIUM POC THREAT This Month

The IPMI 1.5 functionality in Dell iDRAC6 modular before 3.65, iDRAC6 monolithic before 1.98, and iDRAC7 before 1.57.57 does not properly select session ID values, which makes it easier for remote. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and EPSS exploitation probability 59.6%.

Information Disclosure Dell Intel Idrac6 Monolithic Idrac7 +2

NVD Exploit-DB

CVSS 2.0

5.0

EPSS

59.6%

Threat

4.3

CVE-2018-1212

EPSS 4% CVSS 8.8

HIGH This Week

Command Injection Dell Idrac6 Monolithic +1

NVD

CVE-2014-8272

EPSS 60% 4.3 CVSS 5.0

MEDIUM POC THREAT This Month

Information Disclosure Dell Intel +4

NVD Exploit-DB