First published: Mon Apr 10 2017(Updated: )
Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo.
Credit: cret@cert.org
Affected Software | Affected Version | How to fix |
---|---|---|
Dell Integrated Remote Access Controller Firmware | <=2.20.20.20 | |
Dell Integrated Remote Access Controller 7 | ||
Dell Integrated Remote Access Controller 8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-7271 is classified as a high severity vulnerability that can lead to information disclosure.
To fix CVE-2015-7271, update the Dell Integrated Remote Access Controller (iDRAC) firmware to version 2.21.21.21 or later.
CVE-2015-7271 affects the racadm getsystinfo functionality within the Dell iDRAC 7 and 8 firmware.
CVE-2015-7271 does not directly lead to remote code execution but can expose sensitive information.
Users of Dell Integrated Remote Access Controllers (iDRAC) versions prior to 2.21.21.21 are impacted by CVE-2015-7271.