CVE-2018-1244: iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.
Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary commands on the iDRAC where SNMP alerting is enabled.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2018-1244?
CVE-2018-1244 is a vulnerability in Dell EMC iDRAC7/iDRAC8 and iDRAC9 that allows remote authenticated users to execute arbitrary commands.
What is the severity of CVE-2018-1244?
CVE-2018-1244 has a severity score of 8.8, which is considered high.
How does CVE-2018-1244 impact Dell EMC iDRAC7/iDRAC8?
CVE-2018-1244 allows remote authenticated users with configuration privileges to exploit a command injection vulnerability in the SNMP agent, potentially leading to the execution of arbitrary commands.
What versions of Dell EMC iDRAC7/iDRAC8 are affected by CVE-2018-1244?
Versions of Dell EMC iDRAC7/iDRAC8 prior to 2.60.60.60 are affected by CVE-2018-1244.
What versions of Dell EMC iDRAC9 are affected by CVE-2018-1244?
Versions of Dell EMC iDRAC9 prior to 3.21.21.21 are affected by CVE-2018-1244.