Medium severity4.3NVD Advisory· Published Nov 7, 2019· Updated Jun 17, 2026

CVE-2019-3764

Description

Dell EMC iDRAC7 versions prior to 2.65.65.65, iDRAC8 versions prior to 2.70.70.70 and iDRAC9 versions prior to 3.36.36.36 contain an improper authorization vulnerability. A remote authenticated malicious iDRAC user with low privileges may potentially exploit this vulnerability to obtain sensitive information such as password hashes.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Dell/iDRAC9llm-fuzzy
Range: <3.36.36.36
Dell/Idrac7llm-fuzzy
Range: <2.65.65.65
Dell/iDRAC8llm-fuzzy
Range: <2.70.70.70
Dell/Integrated Remote Access Controller Firmwarecpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

www.dell.com/support/article/sln319317/dsa-2019-137-idrac-improper-authorization-vulnerabilitynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000