CVE-2019-3706

Web Interface Authentication Bypass Vulnerability

High · published April 26, 2019

CVSS v3.0
8.6
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.03308 · 88.5th percentile
Published
2019-04-26T18:22Z
EPSS history
Timeline
  • 26 APR 18:22Z
    Web Interface Authentication Bypass Vulnerability
    cvelistv5