VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 24, 2013· Updated Apr 29, 2026

CVE-2013-3589

CVE-2013-3589

Description

Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.

Affected products

17
  • Dell/Idrac6 Firmware8 versions
    cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*range: <=1.95
    • cpe:2.3:o:dell:idrac6_firmware:1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.3:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.5:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.6:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.8:*:*:*:*:*:*:*
  • Dell/Idrac6 Monolithic
    cpe:2.3:h:dell:idrac6_monolithic:-:*:*:*:*:*:*:*
  • Dell/Idrac7 Firmware7 versions
    cpe:2.3:o:dell:idrac7_firmware:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:dell:idrac7_firmware:*:*:*:*:*:*:*:*range: <=1.40.40
    • cpe:2.3:o:dell:idrac7_firmware:1.00.00:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.06.06:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.10.10:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.20.20:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.23.23:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.37.35:*:*:*:*:*:*:*
  • Dell/Idrac7
    cpe:2.3:h:dell:idrac7:-:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.