CVE-2019-3706

Summary

Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.

Affected Software

VendorProductVersion RangeStatus
Dell EMCiDRAC3.24.24.24 < 3.24.24.24affected
Dell EMCiDRAC3.21.26.22 < 3.21.26.22affected
Dell EMCiDRAC3.22.22.22 < 3.22.22.22affected
Dell EMCiDRAC3.21.25.22 < 3.21.25.22affected

Weaknesses

  • Web Interface Authentication Bypass Vulnerability

ADP Enrichment

CVE Program Container

Additional References

References