.. / CVE-2018-1207

Exploit for Dell iDRAC7/8 Devices - Remote Code Injection (CVE-2018-1207)

Description:

Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code.

Nuclei Template

View the template here CVE-2018-1207.yaml

Validate with Nuclei

echo "$URL" | nuclei -t ~/nuclei-templates/http/cves/2018/CVE-2018-1207.yaml
Copy

References:

https://github.com/KraudSecurity/Exploits/blob/master/CVE-2018-1207/CVE-2018-1207.py
https://downloads.dell.com/solutions/dell-management-solution-resources/iDRAC_CVE%201207_1211_1000116.pdf
https://twitter.com/nicowaisman/status/977279766792466432
https://nvd.nist.gov/vuln/detail/CVE-2018-1207
http://en.community.dell.com/techcenter/extras/m/white_papers/20485410