Directory Traversal Vulnerability in Dell Integrated Remote Access Controller
CVE-2015-7270

7.8HIGH

Key Information:

Vendor

Dell
Status
Dell Integrated Remote Access Controller (idrac)
Vendor
CVE Published:
10 April 2017

What is CVE-2015-7270?

The vulnerability found in Dell's Integrated Remote Access Controller (iDRAC) 6, 7, and 8 allows attackers to exploit directory traversal flaws. These vulnerabilities can enable unauthorized users to access restricted files and directories on the device, potentially leading to exposure of sensitive information. The issue affects versions prior to 2.80 for iDRAC 6 and versions prior to 2.21.21.21 for iDRAC 7 and 8. Users are advised to update their systems to the latest firmware to mitigate these risks.

Affected Version(s)

Dell Integrated Remote Access Controller (iDRAC) Dell Integrated Remote Access Controller (iDRAC)

References

http://www.securityfocus.com/bid/97521
vdb-entryx_refsource_BID
http://en.community.dell.com/techcenter/extras/m/white_pa...
x_refsource_MISC

CVSS V3.1

Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.