OpenCVE

Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks.

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity High

Privileges Required Low

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

AV:N/AC:L/Au:N/C:P/I:N/A:N

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Dell	Idrac6 Firmware Idrac7 Firmware Idrac8 Firmware Idrac9 Firmware

Configuration 1 [-]

OR	cpe:2.3:o:dell:idrac6_firmware::::::::
	cpe:2.3:o:dell:idrac7_firmware::::::::
	cpe:2.3:o:dell:idrac8_firmware::::::::
	cpe:2.3:o:dell:idrac9_firmware::::::::

No data.

References

Link	Providers
http://en.community.dell.com/techcenter/extras/m/white_papers/20487494

History

No history.

MITRE

Status: PUBLISHED

Assigner: dell

Published: 2018-07-02T17:00:00Z

Updated: 2024-09-16T19:20:22.599Z

Reserved: 2017-12-06T00:00:00

Link: CVE-2018-1243

Vulnrichment

No data.

NVD

Status : Modified

Published: 2018-07-02T17:29:00.347

Modified: 2024-11-21T03:59:27.130

Link: CVE-2018-1243

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "iDRAC6", "vendor": "Dell EMC", "versions": [{"lessThan": "2.91", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "iDRAC7", "vendor": "Dell EMC", "versions": [{"lessThan": "2.60.60.60", "status": "affected", "version": "unspecified", "versionType": "custom"}]}, {"product": "iDRAC8", "vendor": "Dell EMC", "versions": [{"lessThan": "2.60.60.60", "status": "affected", "version": "unspecified", "versionType": "custom"}]}], "credits": [{"lang": "en", "value": "Dell EMC would like to thank Check Point Software Technologies Ltd. for reporting the issue to us."}], "datePublic": "2018-06-26T00:00:00", "descriptions": [{"lang": "en", "value": "Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks."}], "metrics": [{"cvssV3_0": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}}], "problemTypes": [{"descriptions": [{"description": "Weak CGI session ID vulnerability.", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-07-02T16:57:01", "orgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "shortName": "dell"}, "references": [{"tags": ["x_refsource_CONFIRM"], "url": "http://en.community.dell.com/techcenter/extras/m/white_papers/20487494"}], "source": {"discovery": "UNKNOWN"}, "title": "iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "security_alert@emc.com", "DATE_PUBLIC": "2018-06-26T05:00:00.000Z", "ID": "CVE-2018-1243", "STATE": "PUBLIC", "TITLE": "iDRAC6/iDRAC7/iDRAC8 - Weak CGI session ID vulnerability"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "iDRAC6", "version": {"version_data": [{"affected": "<", "version_affected": "<", "version_value": "2.91"}]}}, {"product_name": "iDRAC7", "version": {"version_data": [{"affected": "<", "version_affected": "<", "version_value": "2.60.60.60"}]}}, {"product_name": "iDRAC8", "version": {"version_data": [{"affected": "<", "version_affected": "<", "version_value": "2.60.60.60"}]}}]}, "vendor_name": "Dell EMC"}]}}, "credit": [{"lang": "eng", "value": "Dell EMC would like to thank Check Point Software Technologies Ltd. for reporting the issue to us."}], "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks."}]}, "impact": {"cvss": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "Weak CGI session ID vulnerability."}]}]}, "references": {"reference_data": [{"name": "http://en.community.dell.com/techcenter/extras/m/white_papers/20487494", "refsource": "CONFIRM", "url": "http://en.community.dell.com/techcenter/extras/m/white_papers/20487494"}]}, "source": {"discovery": "UNKNOWN"}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-05T03:51:48.924Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://en.community.dell.com/techcenter/extras/m/white_papers/20487494"}]}]}, "cveMetadata": {"assignerOrgId": "c550e75a-17ff-4988-97f0-544cde3820fe", "assignerShortName": "dell", "cveId": "CVE-2018-1243", "datePublished": "2018-07-02T17:00:00Z", "dateReserved": "2017-12-06T00:00:00", "dateUpdated": "2024-09-16T19:20:22.599Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "D0759681-3393-4FAB-A251-16BF93DC959B", "versionEndExcluding": "2.91", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:idrac7_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "1ED37BFF-3509-4044-B386-9D6212B63CFA", "versionEndExcluding": "2.60.60.60", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:idrac8_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "B8F1BC7F-CCAC-45CD-832F-5B4CDC7A5D15", "versionEndExcluding": "2.60.60.60", "vulnerable": true}, {"criteria": "cpe:2.3:o:dell:idrac9_firmware:*:*:*:*:*:*:*:*", "matchCriteriaId": "38E4C31B-2354-4DC9-BE44-D11E93492384", "versionEndExcluding": "3.21.21.21", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "Dell EMC iDRAC6, versions prior to 2.91, iDRAC7/iDRAC8, versions prior to 2.60.60.60 and iDRAC9, versions prior to 3.21.21.21, contain a weak CGI session ID vulnerability. The sessions invoked via CGI binaries use 96-bit numeric-only session ID values, which makes it easier for remote attackers to perform bruteforce session guessing attacks."}, {"lang": "es", "value": "Dell EMC iDRAC6, en versiones anteriores a la 2.91; iDRAC7/iDRAC8, en versiones anteriores a la 2.60.60.60 y iDRAC9, en versiones anteriores a la 3.21.21.21, contienen una vulnerabilidad de ID de sesi\u00f3n CGI d\u00e9bil. Las sesiones invocadas mediante binarios CGI emplean valores de ID de sesi\u00f3n solo num\u00e9ricos de 96 bits, lo que facilita que los atacantes remotos realicen ataques de adivinaci\u00f3n de sesi\u00f3n por fuerza bruta."}], "id": "CVE-2018-1243", "lastModified": "2024-11-21T03:59:27.130", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}], "cvssMetricV30": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.0"}, "exploitabilityScore": 1.6, "impactScore": 5.9, "source": "security_alert@emc.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.0"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2018-07-02T17:29:00.347", "references": [{"source": "security_alert@emc.com", "tags": ["Vendor Advisory"], "url": "http://en.community.dell.com/techcenter/extras/m/white_papers/20487494"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "http://en.community.dell.com/techcenter/extras/m/white_papers/20487494"}], "sourceIdentifier": "security_alert@emc.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-358"}], "source": "nvd@nist.gov", "type": "Primary"}]}