Dell Integrated Remote Access Controller Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Integrated Remote Access Controller Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2015-7271 — CVSS 9.8 (critical): Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has a format string issue in racadm getsystinfo.
• CVE-2015-7272 — CVSS 9.8 (critical): Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows attackers to cause a denial of service…
• CVE-2015-7273 — CVSS 9.8 (critical): Dell Integrated Remote Access Controller (iDRAC) 7/8 before 2.21.21.21 has XXE.
• CVE-2015-7274 — CVSS 8.8 (high): Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 allows remote attackers to execute arbitrary administrative HTTP commands.
• CVE-2015-7270 — CVSS 7.8 (high): Dell Integrated Remote Access Controller (iDRAC) 6 before 2.80 and 7/8 before 2.21.21.21 allows directory traversal.
• CVE-2015-7275 — CVSS 6.1 (medium): Dell Integrated Remote Access Controller (iDRAC) 6 before 2.85 and 7/8 before 2.30.30.30 has XSS.