CVE-2018-15774

iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability

Low · published December 13, 2018

CVSS v3.0
3.8
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Dell EMC iDRAC7/iDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access.

The record
Technical detail
CVSS v3.0
3.8 · LOW
Vector
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00941 · 60.6th percentile
Published
2018-12-13T22:00Z
EPSS history
Timeline
  • 13 DEC 22:00Z
    iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability
    cvelistv5