QID 730377

The integrated Dell Remote Access Controller (iDRAC) provides functionality that helps IT administrators deploy, update, monitor, and maintain Dell servers.

Dell iDRAC is affected with multiple security vulnerabilities that may be exploited by malicious users to steal sensitive data of the targeted user.
Affected Versions:
Dell EMC iDRAC8 versions prior to 5.00.20.00
Dell EMC iDRAC9 versions prior to 2.82.82.82

NOTE:
Dell stack-based buffer overflow iDRAC9 versions before 5.00.20.00 and iDRAC8 versions before 2.82.82.82 contain a stack-based buffer overflow vulnerability.

QID Detection Logic (Unauthenticated):
This QID tries to find vulnerable Dell stack-based buffer overflow iDRAC versions by transmitting a HTTP GET request to public/about.html,sysmgmt/2015/bmc/info and aimGetProp=fwVersionFull.

Successful exploitation of these vulnerabilities may allow an remote attacker to gain access to the iDRAC operating system and control process execution.