CVE-2018-1207

EPSS 90.8%

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code.

Affected products

n/a · n/a

public PoCs found — 3

githubgithub.com/mgargiullo/cve-2018-1207★ 18 githubgithub.com/hironull/CVE-2018-1207-better★ 0 exploitdbwww.exploit-db.com/exploits/52246unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://en.community.dell.com/techcenter/extras/m/white_papers/20485410 https://twitter.com/nicowaisman/status/977279766792466432 http://www.securityfocus.com/bid/103694