CVE-2018-1244

Dell EMC iDRAC7/iDRAC8, versions prior to 2.60.60.60, and iDRAC9 versions prior to 3.21.21.21 contain a command injection vulnerability in the SNMP agent. A remote authenticated malicious iDRAC user with configuration privileges could potentially exploit this vulnerability to execute arbitrary commands on the iDRAC where SNMP alerting is enabled.

• CWE-77

• http://en.community.dell.com/techcenter/extras/m/white_papers/20487494Vendor Advisory
• http://www.securityfocus.com/bid/104964Third Party Advisory, VDB Entry
• http://en.community.dell.com/techcenter/extras/m/white_papers/20487494Vendor Advisory
• http://www.securityfocus.com/bid/104964Third Party Advisory, VDB Entry

Published

Jul 2, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-12434LibreSSL before 2.6.5 and 2.7.x before 2.7.4 allows a memory…
• CVE-2018-12435Botan 2.5.0 through 2.6.0 before 2.7.0 allows a memory-cache…
• CVE-2018-12436wolfcrypt/src/ecc.c in wolfSSL before 3.15.1.patch allows a …
• CVE-2018-12437LibTomCrypt through 1.18.1 allows a memory-cache side-channe…4.9
• CVE-2018-12438The Elliptic Curve Cryptography library (aka sunec or libsun…4.9
• CVE-2018-12439MatrixSSL through 3.9.5 Open allows a memory-cache side-chan…
• CVE-2018-12440BoringSSL through 2018-06-14 allows a memory-cache side-chan…
• CVE-2018-12441The CorsairService Service in Corsair Utility Engine is inst…
• CVE-2018-12445An issue was discovered in the com.dropbox.android applicati…
• CVE-2018-12446An issue was discovered in the com.dropbox.android applicati…
• CVE-2018-12447The restore_tqb_pixels function in hevc_filter.c in libavcod…
• CVE-2018-12448Whale Browser before 1.3.48.4 displays no URL information bu…