Idrac8 firmware

This hub aggregates every CVE we track for Idrac8 firmware, a product in the hardware firmware space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 10 most recently published vulnerabilities affecting Idrac8 firmware.

• CVE-2022-34436 Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could expl...2.7Jan 18, 2023
• CVE-2021-21510Untitled vulnerability6.1Mar 8, 2021
• CVE-2020-5344Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vuln...7.0Mar 31, 2020
• CVE-2019-3764Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated mal...4.3Nov 7, 2019
• CVE-2019-3705Buffer Overflow Vulnerability9.8Apr 26, 2019
• CVE-2018-15776iDRAC7, iDRAC8 - Improper Error Handling6.4Dec 13, 2018
• CVE-2018-15774iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability3.8Dec 13, 2018
• CVE-2018-1243iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability7.5Jul 2, 2018
• CVE-2018-1244iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.8.8Jul 2, 2018
• CVE-2016-5685Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injection.8.8Nov 29, 2016