CVE-2018-1211

Vulnerability

Dell EMC iDRAC7 and iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in the Web server's URI parser. An unauthenticated remote attacker can exploit this by sending specially crafted URI strings to read configuration settings from the iDRAC without authentication.

Exploitation

The attacker does not require any authentication or prior access. By querying specific URI strings that traverse directories, the attacker can access files outside the intended web root. The vulnerability is in the URI parser of the embedded web server.

Impact

Successful exploitation allows an unauthenticated attacker to read sensitive configuration data from the iDRAC. This could include credentials, network settings, and other system information, leading to further compromise of the management interface.

Mitigation

Dell EMC has released firmware version 2.52.52.52 to address this vulnerability. Users should update iDRAC7/iDRAC8 to this version or later. No workarounds are mentioned in the available references.