Dell iDRAC9: Authentication bypass via the WS-MAN interface

CVE-2019-3707Firmware, BMC & network fabriccurated

Impact

Authentication bypass via the WS-MAN interface

Who can reach it

Network, unauthenticated

What to do

Same iDRAC firmware update; also disable WS-MAN if unused

References

https://nvd.nist.gov/vuln/detail/CVE-2019-3707

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.