Database/Firmware, BMC & network fabric
Dell iDRAC7/8: CGI injection giving unauthenticated remote code execution as root on the BMC
CVE-2018-1207Firmware, BMC & network fabriccurated
Impact
CGI injection giving unauthenticated remote code execution as root on the BMC
Who can reach it
Network, unauthenticated
What to do
Firmware update to 2.52.52.52+; nodes still on older iDRAC7/8 firmware are the most common legacy hole in a mixed-vintage GPU fleet
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.