CVE-2018-1207

Published Mar 23, 2018·Updated Jun 16, 2026

NVD Description

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code.

Public Exploits & PoCs4 found

PoC: cve-2018-1207

Exploit iDRAC 7 & 8 firmware < 2.52.52.52

PoC: CVE-2018-1207

A proof of concept for CVE-2018-1207.

PoC: CVE-2018-1207-better

Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

PoC: CVE-2018-1207

Reverse Shell CVE for iDRAC 7 & 8 with firmware 2.52.52.52 and below.

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free