Dell戴尔Dell EMC iDRAC Response to Common Vulnerabilities and Exposures CVE-2018-1207 CVE-2018-1211 and CVE-2018-1000116 updated 26 June 2018说明书用户手册.pdf

Dell EMC iDRAC Response to Common Vulnerabilities and Exposures CVE-2018-1207, CVE- 2018-1211, and CVE-2018-1000116 [updated 26 June 2018] OVERVIEW The following is the Dell EMC response to multiple CVE’s. iDRAC firmware versions listed below contain fixes for these security vulnerabilities that could potentially be exploited by malicious users to compromise the affected system. CVE Identifier: CVE-2018-1207 (Critical), CVE-2018-1211 (High), CVE-2018-1000116 (High) TECHNICAL SUMMARY • CVE-2018-1207: Dell EMC iDRAC7/iDRAC8, versions prior to 2, contain CGI injection vulnerability