CVE Vulnerabilities

CVE-2018-15776

Published: Dec 13, 2018 | Modified: Aug 24, 2020
CVSS 3.x
6.8
MEDIUM
Source:
NVD
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.

Affected Software

Name Vendor Start Version End Version
Idrac7_firmware Dell * 2.61.60.60 (excluding)
Idrac8_firmware Dell * 2.61.60.60 (excluding)

References