CVE-2019-3707 HIGH

CVE-2019-3707: WS-MAN Authentication Bypass Vulnerability

Vendor Dell Emc
Product iDRAC
Published April 26, 2019
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.6/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

What the vulnerability does

01Description

Dell EMC iDRAC9 versions prior to 3.30.30.30 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface.

Key dates

02Disclosure timeline

April 26, 2019 CVE published
September 16, 2024 Record updated