high8.8
CVE-2018-1212
The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability.
Impact
The web-based diagnostics console in Dell EMC iDRAC6 (Monolithic versions prior to 2.91 and Modular all versions) contains a command injection vulnerability. A remote authenticated malicious iDRAC user with access to the diagnostics console could potentially exploit this vulnerability to execute arbitrary commands as root on the affected iDRAC system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Idrac6 Modular | All versions |
| Dell | Idrac6 Monolithic | before 2.91 |