CVE-2020-5366

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files.

Score

CVSS 3.1 7.1 High

Status

Modified - security_alert@emc.com

Published

2020-07-09

Last modified

2024-09-16

Weaknesses

CWE-22

Affected products

• Idrac9 Firmware (Dell)
• Integrated Dell Remote Access Controller Idrac (Dell)

References

• https://www.dell.com/support/article/en-us/sln322125/dsa-2020-128-idrac-local-file-inclusion-vulnerability?lang=en