CVE-2018-1211: Path Traversal
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication. A remote unauthenticated attacker may be able to read configuration settings from the iDRAC by querying specific URI strings.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1211?
CVE-2018-1211 is classified as a high severity vulnerability due to its potential for unauthorized data access.
How do I fix CVE-2018-1211?
To mitigate CVE-2018-1211, upgrade Dell EMC iDRAC7/iDRAC8 to version 2.52.52.52 or later.
What is the impact of CVE-2018-1211?
CVE-2018-1211 allows remote unauthenticated attackers to access sensitive configuration settings.
Which versions are affected by CVE-2018-1211?
CVE-2018-1211 affects Dell EMC iDRAC7 and iDRAC8 versions prior to 2.52.52.52.
Is authentication required to exploit CVE-2018-1211?
No, CVE-2018-1211 can be exploited by remote attackers without authentication.