Dell vulnerabilities2 known to be exploited.
Dell has 1,272 published vulnerabilities across 3,715 products in our catalogue. 2 of them are on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Emc Powerscale Onefs, with 84. If you run Dell software, patch the exploited flaws first.
The most recent Dell flaw added to the known-exploited list is CVE-2021-21551, on 31 March 2022. We keep watching the known-exploited list.
Which Dell products have the most vulnerabilities?
Emc Powerscale Onefs leads with 84 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Dell vulnerabilities are being exploited?
2 flaws are on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 8.8Dell dbutil Driver Insufficient Access Control Vulnerability
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
- 5.4Treck TCP/IP stack Out-of-Bounds Read Vulnerability
The Treck TCP/IP stack contains an IPv6 out-of-bounds read vulnerability.
Which Dell flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 90%CVE-2018-1207Critical
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code.
- 80%
Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure.
- 69%CVE-2009-0695High
hagent.exe in Wyse Device Manager (WDM) 4.7.x does not require authentication for commands, which allows remote attackers to obtain management access via a crafted query, as demonstrated by a V52 query that triggers...
- 59%CVE-2022-24422Critical
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability.
- 51%CVE-2018-1217Critical
Avamar Installation Manager in Dell EMC Avamar Server 7.3.1, 7.4.1, and 7.5.0, and Dell EMC Integrated Data Protection Appliance 2.0 and 2.1, is affected by a missing access control check vulnerability which could...
- 48%CVE-2020-5377Critical
Dell EMC OpenManage Server Administrator (OMSA) versions 9.4 and prior contain multiple path traversal vulnerabilities.
- 33%CVE-2021-36300High
iDRAC9 versions prior to 5.00.00.00 contain an improper input validation vulnerability.
- 30%CVE-2021-36299High
Dell iDRAC9 versions 4.40.00.00 and later, but prior to 4.40.29.00 and 5.00.00.00 contain an SQL injection vulnerability.
- 28%CVE-2018-1189Medium
Dell EMC Isilon versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a cross-site scripting vulnerability in the Antivirus Page within...
- 28%CVE-2021-36301High
Dell iDRAC 9 prior to version 4.40.40.00 and iDRAC 8 prior to version 2.80.80.80 contain a Stack Buffer Overflow in Racadm.
All Dell products we track.
482 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Emc Powerscale Onefsemc_powerscale_onefs84 vulnerabilities36 versions
- Powerscale Onefspowerscale_onefs65 vulnerabilities86 versions
- Latitude 9410 Firmwarelatitude_9410_firmware64 vulnerabilities6 versions
- Latitude 5411 Firmwarelatitude_5411_firmware63 vulnerabilities6 versions
- Latitude 5511 Firmwarelatitude_5511_firmware63 vulnerabilities6 versions
- Latitude 7310 Firmwarelatitude_7310_firmware62 vulnerabilities6 versions
- Latitude 7410 Firmwarelatitude_7410_firmware62 vulnerabilities6 versions
- Latitude 5310 Firmwarelatitude_5310_firmware61 vulnerabilities4 versions
- Latitude 5400 Firmwarelatitude_5400_firmware61 vulnerabilities9 versions
- Optiplex 7080 Firmwareoptiplex_7080_firmware61 vulnerabilities4 versions
- Chengming 3990 Firmwarechengming_3990_firmware60 vulnerabilities6 versions
- Chengming 3991 Firmwarechengming_3991_firmware60 vulnerabilities6 versions
- Inspiron 3880 Firmwareinspiron_3880_firmware60 vulnerabilities5 versions
- Inspiron 3881 Firmwareinspiron_3881_firmware60 vulnerabilities5 versions
- Latitude 5410 Firmwarelatitude_5410_firmware60 vulnerabilities5 versions
- Latitude 9510 Firmwarelatitude_9510_firmware60 vulnerabilities2 versions
- Precision 3550 Firmwareprecision_3550_firmware60 vulnerabilities5 versions
- Latitude 5500 Firmwarelatitude_5500_firmware59 vulnerabilities8 versions
- Latitude 5510 Firmwarelatitude_5510_firmware59 vulnerabilities5 versions
- Optiplex 3080 Firmwareoptiplex_3080_firmware59 vulnerabilities2 versions
- Precision 3440 Firmwareprecision_3440_firmware59 vulnerabilities3 versions
- Embedded Box Pc 5000 Firmwareembedded_box_pc_5000_firmware58 vulnerabilities7 versions
- Latitude 7290 Firmwarelatitude_7290_firmware58 vulnerabilities10 versions
- Latitude 7390 Firmwarelatitude_7390_firmware58 vulnerabilities10 versions
This directory lists the 482 Dell products with at least one tracked version, of 3,715 in our catalogue.
Running Dell? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Dell dbutil driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial-of-service (DoS), or information disclosure.
- Matched to
- Dell on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 1,272 published vulnerabilities across 3,715 products and 5,823 versions from Dell. The most recent Dell flaw added to the known-exploited list is CVE-2021-21551, on 31 March 2022.
2 Dell vulnerabilities are on the list of flaws known to be exploited. The most recently added are CVE-2021-21551 and CVE-2020-11899. The full list is on this page.
Emc Powerscale Onefs, with 84 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Dell products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.