CVE-2020-5344 Memory corruption in Integrated Dell Remote Access Controller (iDRAC)
Unauthenticated remote attackers can execute arbitrary code or crash the system via a stack-based buffer overflow in Dell iDRAC firmware.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-5344?
CVE-2020-5344 is a high-severity memory corruption vulnerability in Integrated Dell Remote Access Controller (iDRAC), published on 31 Mar 2020. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.
Which versions are affected by CVE-2020-5344?
It affects 3 products.
Products include Dell Idrac7 Firmware, Dell Idrac8 Firmware, Dell Idrac9 Firmware.
How do I fix CVE-2020-5344?
No fix has been published for CVE-2020-5344 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2020-5344 being exploited?
There is no known exploitation of CVE-2020-5344 in the wild and no public exploit code.
Other vulnerabilities in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2018-1244 iDRAC7/iDRAC8/iDrac9 contains a command injection vulnerability in the SNMP agent.
- CVE-2016-5685 Command injection in iDRAC7 and iDRAC8
- CVE-2018-15776 iDRAC7, iDRAC8 - Improper Error Handling
- CVE-2019-3764 Missing authorization in Integrated Dell Remote Access Controller (iDRAC)
- CVE-2018-15774 iDRAC7/iDRAC8/iDRAC9 - Privilege Escalation Vulnerability
Sources
Also known as GHSA-cxcf-v498-h2h8.