Dell: >> Idrac8 Firmware >> 2.70.70.70 Security Vulnerabilities
Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
CVSS Score
2.7
EPSS Score
0.0
Published
2023-01-18
Dell iDRAC8 versions prior to 2.75.100.75 contain a host header injection vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability by injecting arbitrary ‘Host’ header values to poison a web-cache or trigger redirections.
CVSS Score
6.1
EPSS Score
0.008
Published
2021-03-08