CWE Code: 77
Vulnerability Type: privilege_escalation
CVSS Score: 6.5
CWE Name:  Improper Neutralization of Special Elements used in a Command ('Command Injection')
Summary: dell emc idrac7/idrac8, versions prior to 2.60.60.60, and idrac9 versions prior to 3.21.21.21 contain a command injection vulnerability in the snmp agent. a remote authenticated malicious idrac user with configuration privileges could potentially exploit this vulnerability to execute arbitrary commands on the idrac where snmp alerting is enabled.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/PARTIAL/PARTIAL
Published Date: 2018-07-02
Last Modified Date: 2019-10-09