CVE-2013-4785: Critical severity dell idrac6 vulnerability
The web interface on the Dell iDRAC6 with firmware before 1.95 allows remote attackers to modify the CLP interface for arbitrary users and possibly have other impact via a request to an unspecified form that is accessible from testurls.html. NOTE: the vendor disputes the significance of this issue, stating "DRAC's are intended to be on a separate management network; they are not designed nor intended to be placed on or connected to the Internet."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-4785?
CVE-2013-4785 is considered a high-severity vulnerability due to its potential for remote exploitation.
How do I fix CVE-2013-4785?
To address CVE-2013-4785, update the Dell iDRAC6 firmware to version 1.95 or later.
What types of attackers are affected by CVE-2013-4785?
CVE-2013-4785 allows remote attackers to exploit the vulnerability without physical access.
What impact does CVE-2013-4785 have on system security?
CVE-2013-4785 can allow unauthorized modification of the CLP interface, potentially compromising user permissions.
Is CVE-2013-4785 specific to certain firmware versions?
Yes, CVE-2013-4785 specifically affects Dell iDRAC6 firmware versions prior to 1.95.