CVE-2018-1249 Security feature bypass in iDRAC9
Man-in-the-middle attackers can strip TLS protection from iDRAC9 web server connections, exposing sensitive data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-1249?
CVE-2018-1249 is a medium-severity vulnerability in Dell EMC iDRAC9, published on 2 Jul 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell EMC iDRAC9 versions prior to 3.21.21.21 did not enforce the use of TLS/SSL for a connection to iDRAC web server for certain URLs. A man-in-the-middle attacker could use this vulnerability to strip the SSL/TLS protection from a connection between a client and a server.
Which versions are affected by CVE-2018-1249?
It affects 1 product.
Products include Dell Idrac9 Firmware.
How do I fix CVE-2018-1249?
No fix has been published for CVE-2018-1249 yet. Limit exposure of the affected software until one is available.
Is CVE-2018-1249 being exploited?
There is no known exploitation of CVE-2018-1249 in the wild and no public exploit code.
Other vulnerabilities in Dell EMC iDRAC9
- CVE-2021-21538 Auth bypass in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2019-3706 Web Interface Authentication Bypass Vulnerability
- CVE-2019-3707 WS-MAN Authentication Bypass Vulnerability
- CVE-2020-5366 Path traversal in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2021-21541 Cross-site scripting in Integrated Dell Remote Access Controller (iDRAC)
Sources
Also known as GHSA-h5w6-cmx7-x823.