VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 24, 2013· Updated Jun 16, 2026

CVE-2013-3589

CVE-2013-3589

Description

Cross-site scripting (XSS) vulnerability in the login page in the Administrative Web Interface on Dell iDRAC6 monolithic devices with firmware before 1.96 and iDRAC7 devices with firmware before 1.46.45 allows remote attackers to inject arbitrary web script or HTML via the ErrorMsg parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

19
  • Dell/Idrac6 Monolithic
    cpe:2.3:h:dell:idrac6_monolithic:-:*:*:*:*:*:*:*
  • Dell/Idrac72 versions
    cpe:2.3:h:dell:idrac7:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:dell:idrac7:-:*:*:*:*:*:*:*
    • (no CPE)range: <1.46.45
  • Dell/Idrac6 Firmware8 versions
    cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:o:dell:idrac6_firmware:*:*:*:*:*:*:*:*range: <=1.95
    • cpe:2.3:o:dell:idrac6_firmware:1.0:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.1:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.2:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.3:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.5:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.6:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac6_firmware:1.8:*:*:*:*:*:*:*
  • Dell/Idrac7 Firmware7 versions
    cpe:2.3:o:dell:idrac7_firmware:*:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:o:dell:idrac7_firmware:*:*:*:*:*:*:*:*range: <=1.40.40
    • cpe:2.3:o:dell:idrac7_firmware:1.00.00:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.06.06:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.10.10:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.20.20:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.23.23:*:*:*:*:*:*:*
    • cpe:2.3:o:dell:idrac7_firmware:1.37.35:*:*:*:*:*:*:*
  • Dell/iDRAC6llm-fuzzy
    Range: <1.96

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.