Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2018-15776

iDRAC7, iDRAC8 - Improper Error Handling

Description

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC iDRAC

  • iDRAC7 to < 2.61.60.60affected
  • iDRAC8 to < 2.61.60.60affected

References