Stack-based Buffer Overflow in Dell EMC iDRAC Products
CVE-2020-5344

7HIGH

Key Information:

Vendor
Dell
Status
Integrated Dell Remote Access Controller (idrac)
Vendor
CVE Published:
31 March 2020

Summary

Dell EMC iDRAC7, iDRAC8, and iDRAC9 contain a vulnerability that allows unauthorized remote attackers to exploit a stack-based buffer overflow. By sending specially crafted input data, attackers can crash the affected processes or execute arbitrary code on the devices. It is crucial for users to update to the latest versions to mitigate the risks associated with this vulnerability. For more information, visit Dell's support page.

Affected Version(s)

Integrated Dell Remote Access Controller (iDRAC) < 2.65.65.65

References

https://www.dell.com/support/article/en-us/sln320717/dsa-...
x_refsource_MISC

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.