CVE-2020-5344

7HIGH

Key Information:

Vendor
Dell
Status
Integrated Dell Remote Access Controller (idrac)
Vendor
CVE Published:
31 March 2020

Summary

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.

Affected Version(s)

Integrated Dell Remote Access Controller (iDRAC) < 2.65.65.65

References

https://www.dell.com/support/article/en-us/sln320717/dsa-...
x_refsource_MISC

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.