6.8
CVSSv3

CVE-2018-15776

Published: 13/12/2018 Updated: 24/08/2020
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 6.8 | Impact Score: 5.9 | Exploitability Score: 0.9
VMScore: 410
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Dell EMC iDRAC7/iDRAC8 versions before 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

dell idrac7 firmware

dell idrac8 firmware

Github Repositories

Unsupported GPUs in Dell C4130 get throttled, here's how to prevent this from happening.

Reverse engineering Dell iDRAC to get rid of GPU throttling TL;DR Unsupported GPUs in Dell C4130 get throttled, here's how to prevent this from happening The problem Dell PowerEdge C4130 ("C4130") is a versatile platform, accomodating up to four GPUs per 1U box It is readily available on eBay so it could be used for various custom builds, including SXM2 GPUs O

Achieving root & other modifications on Dell IPMI/BMC

Special thanks to Adam Nielsen for his help and poking through sources with me over 70+ emails in two timezones Also, for keeping the same Uni email for 10+ years idrac-7-8-reverse-engineering Achieving undetectable root + loading of arbitrary code on Dell IDRAC7 & IDRAC8 IPMI/BMC server hardware Featured on: ServeTheHome The Register AnandTech CVE: CVE-2018-15776 I