漏洞描述
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a CGI injection vulnerability which could be used to execute remote code. A remote unauthenticated attacker may potentially be able to use CGI variables to execute remote code.
影响产品
修复建议
建议关注厂商安全公告，及时升级至已修复版本，并结合实际资产暴露情况采取缓解措施。
参考链接
downloads.dell.comhttps://downloads.dell.com/solutions/dell-management-solution-resources/iDRAC_CVE%201207_1211_1000116.pdf↗nvd.nist.govhttps://nvd.nist.gov/vuln/detail/CVE-2018-1207↗en.community.dell.comhttp://en.community.dell.com/techcenter/extras/m/white_papers/20485410↗twitter.comhttps://twitter.com/nicowaisman/status/977279766792466432↗