VULNERABILITY INTELLIGENCE
CVE-2019-3707
CVSS score8.6 HIGH
EPSS probability3.31%
CISA KEVNot currently listed
Published2019-04-26
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Description
Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface.
Primary references
- security_alert@emc.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory