VulnSocial

CVE-2019-3705General(dell / idrac6_firmware)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Dell EMC iDRAC6 versions prior to 2.92, iDRAC7/iDRAC8 versions prior to 2.61.60.60, and iDRAC9 versions prior to 3.20.21.20, 3.21.24.22, 3.21.26.22 and 3.23.23.23 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may potentially exploit this vulnerability to crash the webserver or execute arbitrary code on the system with privileges of the webserver by sending specially crafted input data to the affected system.

dell CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-120CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • idrac6_firmware
  • idrac7_firmware
  • idrac8_firmware
  • idrac9_firmware

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • General: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
dell
Products
idrac6_firmwareidrac7_firmwareidrac8_firmwareidrac9_firmware

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-31: 107-31
Signal classification1 categories
General
1100.0%
Full discourse1 post
  • Voidwalker@JustWantToQ1
    General

    There are some older vulns like: CVE-2019-3706/CVE-2019-3707/CVE-2019-3705 but really you don't even need a vuln with the level of opsec failures going on, here. Just a C2 to orchestrate scraping free proxies to use in checking user:pass combos. If you do a bit of OSINT on the corp you can likely already find an old admin password that's never been changed by anyone other than 1 guy who set this up long ago.

    Post summary

    The post references a few older CVEs and suggests leveraging C2 orchestration and OSINT to find an unchanged admin password, but provides no details on the vulnerabilities, exploit code, or active attacks.

    10010169
    3.0K followersView on X
CPE platform detail4 entries

4 of 4 entries

PartVendorProductVersionTarget SWTarget HW
OSdellidrac6_firmware---
OSdellidrac7_firmware---
OSdellidrac8_firmware---
OSdellidrac9_firmware---

Explore more

Back to dashboarddell CVEsidrac6_firmware vulnerabilities