Vulnerability Description
Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the webserver or execute arbitrary code on the system with privileges of the webserver by sending specially crafted input data to the affected system.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Dell | Idrac6 Firmware | < 2.92 |
| Dell | Idrac7 Firmware | < 2.61.60.60 |
| Dell | Idrac8 Firmware | < 2.61.60.60 |
| Dell | Idrac9 Firmware | < 3.20.21.20 |
Related Weaknesses (CWE)
References
- https://www.dell.com/support/article/us/en/04/sln316930/dsa-2019-028-dell-emc-idVendor Advisory
- https://www.dell.com/support/article/us/en/04/sln316930/dsa-2019-028-dell-emc-idVendor Advisory
FAQ
What is CVE-2019-3705?
CVE-2019-3705 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow...
How severe is CVE-2019-3705?
CVE-2019-3705 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2019-3705?
Check the references section above for vendor advisories and patch information. Affected products include: Dell Idrac6 Firmware, Dell Idrac7 Firmware, Dell Idrac8 Firmware, Dell Idrac9 Firmware.