CVE-2020-5344

—

CVSS 3.1

9.8 critical

EPSS

4%p89

Published

Mar 31, 2020 (Mar 31, 2020)

Modified

Jun 17, 2026

Description

Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based buffer overflow vulnerability. An unauthenticated remote attacker may exploit this vulnerability to crash the affected process or execute arbitrary code on the system by sending specially crafted input data.

Vendors: dell
Products: idrac7 firmware, idrac8 firmware, idrac9 firmware
Weakness: CWE-121, CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.