Dell Integrated Dell Remote Access Controller 8 vulnerabilities

5 vulnerabilities

Known vulnerabilities in Dell Integrated Dell Remote Access Controller 8, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3CVE-2021-36346dellintegrated_dell_remote_access_controller_8_firmware+1
EPSS score
4.18%
Dell iDRAC 8 prior to version 2.82.82.82 contain a denial of service vulnerability. An unauthenticated remote attacker could potentially exploit this vulnerability to deny access to the iDRAC webserver.9CVE-2021-36347dellintegrated_dell_remote_access_controller_8_firmware+2
EPSS score
2.21%
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.7.5CVE-2022-24423dellintegrated_dell_remote_access_controller_8_firmware
EPSS score
1.64%
Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition.4.9CVE-2022-34436dellidrac8_firmware+1
EPSS score
0.49%
Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.8CVE-2024-25951dellidrac8_firmware+1
EPSS score
0.83%
A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.