ASA-2019-00242 – Dell EMC iDRAC: WS-MAN Authentication Bypass Vulnerability

Posted on by Allele Security Intelligence in Alerts

Allele Security Alert

ASA-2019-00242

Identifier(s)

ASA-2019-00242, DSA-2019-028, CVE-2019-3707

Title

WS-MAN Authentication Bypass Vulnerability

Vendor(s)

Dell

Product(s)

Dell EMC iDRAC

Affected version(s)

Dell EMC iDRAC9 versions prior to 3.30.30.30

Fixed version(s)

Dell EMC iDRAC9 3.30.30.30

Proof of concept

Unknown

Description

A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted input data to the WS-MAN interface.

Technical details

Unknown

Credits

Unknown

Reference(s)

Dell EMC iDRAC Multiple Vulnerabilities
https://www.dell.com/support/article/br/pt/brdhs1/sln316930/dsa-2019-028-dell-emc-idrac-multiple-vulnerabilities?lang=en

CVE-2019-3707
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-3707

CVE-2019-3707
https://nvd.nist.gov/vuln/detail/CVE-2019-3707

If there is any error in this alert or you wish a comprehensive analysis, let us know.

Last modified: May 1, 2019

We are not responsible for any data loss, device corruption or any other type of issue due to the use of any information mentioned in our security alerts.