[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ftMje1rSYYt6lPlgLCO6PPoFuofoqcttXuh94k0ylVKo":3,"g5a-ex:dell\u002Fidrac7_firmware@*":125,"g5a-family:dell\u002Fidrac7_firmware":127},{"success":4,"data":5},true,{"product":6,"versions":37,"topVulnerabilitiesByEpss":48,"kevVulnerabilities":102,"seoMetadata":103,"meta":122},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":36},"dell","idrac7_firmware",10,9,0,"2020-03-31",[14,18,20,22,24,26,28,30,32,34],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"1.00.00",1,false,{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},"1.06.06",{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},"1.10.10",{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},"1.20.20",{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},"1.23.23",{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},"1.37.35",{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},"1.40.40",{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},"2.30.30.30",{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},"2.61.60.60",{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},"2.65.65.65","Idrac7 Firmware by Dell is a technology product with 10 tracked versions and 9 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[38,39,40,41,42,43,44,45,46,47],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":16,"kev_count":11,"has_kev":17},{"version":21,"cve_count":16,"kev_count":11,"has_kev":17},{"version":23,"cve_count":16,"kev_count":11,"has_kev":17},{"version":25,"cve_count":16,"kev_count":11,"has_kev":17},{"version":27,"cve_count":16,"kev_count":11,"has_kev":17},{"version":29,"cve_count":11,"kev_count":11,"has_kev":17},{"version":31,"cve_count":11,"kev_count":11,"has_kev":17},{"version":33,"cve_count":11,"kev_count":11,"has_kev":17},{"version":35,"cve_count":11,"kev_count":11,"has_kev":17},[49,57,61,69,74,79,87,92,97],{"cveId":50,"description":51,"publishedDate":52,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":56},"CVE-2019-3705","Dell EMC iDRAC6 versions prior to 2.92, iDRAC7\u002FiDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the webserver or execute arbitrary code on the system with privileges of the webserver by sending specially crafted input data to the affected system.","2019-04-26",9.8,"v3.1","Critical",0.04173,{"cveId":58,"description":59,"publishedDate":12,"cvssScore":53,"cvssVersion":54,"severity":55,"isKev":17,"epssScore":60},"CVE-2020-5344","Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.",0.03842,{"cveId":62,"description":63,"publishedDate":64,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":68},"CVE-2018-1244","Dell EMC iDRAC7\u002FiDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary commands on the iDRAC where SNMP alerting is enabled.","2018-07-02",8.8,"v3.0","High",0.03428,{"cveId":70,"description":71,"publishedDate":64,"cvssScore":72,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":73},"CVE-2018-1243","Dell EMC iDRAC6, versions prior to 2.91, iDRAC7\u002FiDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.",7.5,0.01818,{"cveId":75,"description":76,"publishedDate":77,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":78},"CVE-2016-5685","Dell iDRAC7 and iDRAC8 devices with firmware before 2.40.40.40 allow authenticated users to gain Bash shell access through a string injection.","2016-11-29",0.01757,{"cveId":80,"description":81,"publishedDate":82,"cvssScore":83,"cvssVersion":84,"severity":85,"isKev":17,"epssScore":86},"CVE-2013-3589","Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.","2013-09-24",4.3,"v2","Medium",0.01634,{"cveId":88,"description":89,"publishedDate":90,"cvssScore":65,"cvssVersion":66,"severity":67,"isKev":17,"epssScore":91},"CVE-2018-15774","Dell EMC iDRAC7\u002FiDRAC8 versions prior to 2.61.60.60 and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23 contain a privilege escalation vulnerability. An authenticated malicious iDRAC user with operator privileges could potentially exploit a permissions check flaw in the Redfish interface to gain administrator access.","2018-12-13",0.00941,{"cveId":93,"description":94,"publishedDate":95,"cvssScore":83,"cvssVersion":54,"severity":85,"isKev":17,"epssScore":96},"CVE-2019-3764","Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive information such as password hashes.","2019-11-07",0.00882,{"cveId":98,"description":99,"publishedDate":90,"cvssScore":100,"cvssVersion":66,"severity":85,"isKev":17,"epssScore":101},"CVE-2018-15776","Dell EMC iDRAC7\u002FiDRAC8 versions prior to 2.61.60.60 contain an improper error handling vulnerability. An unauthenticated attacker with physical access to the system could potentially exploit this vulnerability to get access to the u-boot shell.",6.8,0.00416,[],{"title":104,"metaDescription":105,"keywords":106,"structuredData":107},"Idrac7 Firmware by Dell - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Idrac7 Firmware by Dell covering 10 versions with 9 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Idrac7 Firmware vulnerabilities, Idrac7 Firmware security, Idrac7 Firmware CVE, Dell Idrac7 Firmware, Idrac7 Firmware threat intelligence, Dell security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":108,"@type":109,"name":110,"description":105,"url":111,"manufacturer":112,"applicationCategory":116,"softwareVersion":117,"mainEntity":118},"https:\u002F\u002Fschema.org","SoftwareApplication","Idrac7 Firmware","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fdell\u002Fidrac7_firmware",{"@type":113,"name":114,"url":115},"Organization","Dell","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fdell","Security Software","10 versions tracked",{"@type":119,"name":120,"description":121,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Idrac7 Firmware Security Vulnerabilities","Security vulnerabilities affecting Idrac7 Firmware by Dell",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":123,"apiVersion":124},"2026-10-19T22:49:55.222Z","3.0",{"rows":126,"total":11,"capped":17,"failed":11},[],[]]