Known vulnerabilities in iDRAC6

Vendor: Dell
Software: iDRAC6
Software CPE: cpe:2.3:a:dell:idrac6:*:*:*:*:*:*:*:*
Website: https://www.delltechnologies.com/en-us/index.htm
Total vulnerabilities: 7
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting iDRAC6 iDRAC6 is affected by 7 known vulnerabilities: 1 high, 6 low Critical High Medium Low

Vulnerabilities (7)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU17816 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2013-3589		 CWE-79 Low
No
No
 1.96 21.02.2019 SB2013092501
#VU17815 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-7275		 CWE-79 Low
No
No
 2.85 21.02.2019 SB2015120201
#VU17814 - Command injection
CVE-2015-7274		 CWE-77 Low
No
No
 2.80 21.02.2019 SB2015120201
#VU17812 - Buffer overflow
CVE-2015-7272		 CWE-120 Low
No
No
 2.80 21.02.2019 SB2015120201
#VU17810 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2015-7270		 CWE-22 Low
No
No
 2.80 21.02.2019 SB2015120201
#VU17809 - Command injection
CVE-2018-1243		 CWE-77 Low
No
No
 2.91 21.02.2019 SB2018070210
#VU638 - Buffer overflow
CVE-2016-2108		 CWE-120 High
No
No
 2.85, 3.80 23.09.2016 SB2018011609
SB2016051804
SB2016053102
and 28 more