[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fzWTabbS8xZ471rE6nPJEauuBXmZnb805T1rKVUrENOc":3,"g5a-risk:CVE-2018-1243":129},{"success":4,"data":5,"meta":127},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":15,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":64,"references":65,"referencesCount":71,"weaknesses":72,"weaknessesCount":71,"isActivelyExploited":81,"cisaInfo":15,"otxData":15,"relatedBlogPosts":82,"seoMetadata":83,"configurations":108,"relatedVendorCves":125,"notableEvents":126},"CVE-2018-1243","What is CVE-2018-1243?","Dell EMC iDRAC6, versions prior to 2.91, iDRAC7\u002FiDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.","Dell EMC iDRAC6, versions prior to 2.91, iDRAC7\u002FiDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID ...","2018-07-02T17:29:00.347","2019-10-09T23:38:16.46",7.5,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":36,"CVSSMetricV40":15},null,[17,29],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH",3.9,3.6,{"Source":30,"Type":31,"CVSSData":32,"ExploitabilityScore":34,"ImpactScore":35},"security_alert@emc.com","Secondary",{"Version":21,"VectorString":33,"AttackVector":22,"AttackComplexity":26,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":26,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:H\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",1.6,5.9,[37],{"Source":18,"Type":19,"CVSSData":38,"BaseSeverity":43,"ExploitabilityScore":44,"ImpactScore":45,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":39,"VectorString":40,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":41,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":42,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:N\u002FA:N","PARTIAL",5,"MEDIUM",10,2.9,0.01818,[46,46,46,46,46,46,46],"High",[50,55,58,61],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"dell","idrac6_firmware","*","cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*",{"vendor":51,"product":56,"version":53,"criteria":57,"vulnerable":4},"idrac7_firmware","cpe:2.3:o:dell:idrac7_firmware:*:*:*:*:*:*:*:*",{"vendor":51,"product":59,"version":53,"criteria":60,"vulnerable":4},"idrac8_firmware","cpe:2.3:o:dell:idrac8_firmware:*:*:*:*:*:*:*:*",{"vendor":51,"product":62,"version":53,"criteria":63,"vulnerable":4},"idrac9_firmware","cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*",4,[66],{"url":67,"source":68,"tags":69},"http:\u002F\u002Fen.community.dell.com\u002Ftechcenter\u002Fextras\u002Fm\u002Fwhite_papers\u002F20487494","Dell",[70],"Vendor Advisory",1,[73],{"id":74,"name":75,"description":76,"extendedDescription":77,"status":78,"abstraction":79,"structure":80},"CWE-358","Improperly Implemented Security Check for Standard","The product does not implement or incorrectly implements one or more security-relevant checks as specified by the design of a standardized algorithm, protocol, or technique.","","Draft","Base","Simple",false,[],{"title":84,"metaDescription":85,"keywords":86,"canonicalUrl":87,"structuredData":88},"What is CVE-2018-1243? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-1243, a high severity cyber security vulnerability from 2018. Dell EMC iDRAC6, versions prior to 2.91, iDRAC7\u002FiDRAC8, vers...","CVE-2018-1243, CVE-2018-1243 vulnerability, CVE-2018-1243 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, dell security, idrac6_firmware vulnerability, idrac7_firmware vulnerability, idrac8_firmware vulnerability, idrac9_firmware vulnerability","\u002Fwhat-is\u002Fcve-2018-1243",{"@context":89,"@type":90,"headline":84,"description":85,"datePublished":10,"dateModified":11,"author":91,"publisher":95,"about":99,"mainEntityOfPage":103,"articleSection":106,"keywords":107},"https:\u002F\u002Fschema.org","TechArticle",{"@type":92,"name":93,"url":94},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":92,"name":93,"url":94,"logo":96},{"@type":97,"url":98},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":100,"name":6,"description":101,"additionalType":102},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":104,"@id":105},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-1243","Cybersecurity","CVE-2018-1243, CVE-2018-1243 vulnerability, CVE-2018-1243 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[109],{"Operator":15,"Negate":15,"Nodes":110},[111],{"Operator":112,"Negate":15,"CPEMatch":113},"OR",[114,117,120,122],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":115,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":116,"VersionEndIncluding":15},"D0759681-3393-4FAB-A251-16BF93DC959B","2.91",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":118,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":119,"VersionEndIncluding":15},"1ED37BFF-3509-4044-B386-9D6212B63CFA","2.60.60.60",{"Vulnerable":4,"Criteria":60,"MatchCriteriaID":121,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":119,"VersionEndIncluding":15},"B8F1BC7F-CCAC-45CD-832F-5B4CDC7A5D15",{"Vulnerable":4,"Criteria":63,"MatchCriteriaID":123,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":124,"VersionEndIncluding":15},"38E4C31B-2354-4DC9-BE44-D11E93492384","3.21.21.21",[],[],{"lastModified":11,"cacheTime":128,"version":39},1792450226488,{"score":130,"band":131,"action":132,"scoredAt":133},42,"Medium","Plan remediation","2026-10-19T06:57:15.291099+00:00"]