CVE-2019-3707

WS-MAN Authentication Bypass Vulnerability

High · published April 26, 2019

CVSS v3.0
8.6
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface.

The record
Technical detail
CVSS v3.0
8.6 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.03308 · 88.5th percentile
Published
2019-04-26T18:22Z
EPSS history
Timeline
  • 26 APR 18:22Z
    WS-MAN Authentication Bypass Vulnerability
    cvelistv5