Dell Integrated Remote Access Controller (iDRAC) 6 before 2.85 and 7/8 before 2.30.30.30 has XSS.
Product
Dell integrated remote access controller firmware vulnerabilities
6 published CVES affecting Dell integrated remote access controller firmware, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 6
- Critical
- 3
- High
- 2
- Medium
- 1
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest Dell integrated remote access controller firmware CVEs
Newest publication first
-
MediumCVSS 6.1 EPSS 1.2%
-
HighCVSS 8.8 EPSS 2.0%
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands.
-
CVE-2015-7273 Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has XXE.
PublishedCriticalCVSS 9.8 EPSS 1.4%Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has XXE.
-
CriticalCVSS 9.8 EPSS 2.7%
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service (buffer overflow) or possibly have unspecified other impact via a long SSH username or input.
-
CriticalCVSS 9.8 EPSS 2.7%
Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo.
-
HighCVSS 7.8 EPSS 1.2%
Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows directory traversal.
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.