Buffer Overflow Vulnerability

Vulnerability

A stack-based buffer overflow vulnerability exists in the web interface of Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22, and 3.23.23.23. An unauthenticated remote attacker can send specially crafted input data to the affected system, triggering the overflow.

Exploitation

An attacker with network access to the iDRAC web interface can exploit this vulnerability without any authentication. The attack complexity is high (CVSS: AC:H), but successful exploitation requires sending specially crafted input that triggers the buffer overflow, potentially leading to code execution.

Impact

Successful exploitation can cause a crash of the webserver or arbitrary code execution with the privileges of the webserver, typically root. This results in high impact to confidentiality, integrity, and availability (CVSSv3 base score 8.1).

Mitigation

Dell has released firmware updates to address this vulnerability: upgrade iDRAC6 to version 2.92, iDRAC7/iDRAC8 to version 2.61.60.60, and iDRAC9 to versions 3.20.21.20, 3.21.24.22, 3.21.26.22, or 3.23.23.23. As of the advisory date, no workarounds are available. Users should apply the updates promptly [1].