CVE-2013-3589: XSS
Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-3589?
CVE-2013-3589 is classified as a medium severity vulnerability due to its potential for exploitation via cross-site scripting.
How does CVE-2013-3589 affect Dell iDRAC devices?
CVE-2013-3589 allows remote attackers to inject arbitrary web script or HTML into the login page on affected Dell iDRAC devices.
How do I fix CVE-2013-3589?
To resolve CVE-2013-3589, update the firmware on your Dell iDRAC6 devices to version 1.96 or later, or iDRAC7 devices to version 1.46.45 or later.
What are the affected firmware versions for CVE-2013-3589?
CVE-2013-3589 affects Dell iDRAC6 firmware before version 1.96 and iDRAC7 firmware before version 1.46.45.
Can CVE-2013-3589 be exploited remotely?
Yes, CVE-2013-3589 can be exploited remotely as it targets the login page of the Administrative Web Interface of Dell iDRAC devices.