CVE-2019-3706
CVE.org · Published
- Record status
- Published
- Identifier year (not publication year)
- 2019
- Source publication
- Source updated
- Imported by cveboard
- Source snapshot
- cve_2026-10-24_midnight_baseline ·
CNA source text (English)
Web Interface Authentication Bypass Vulnerability
Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
iDRAC
- Vendor
- Dell EMC
- Product
- iDRAC
- Platforms
- Unknown
- Default status
Unknown
| Version (version) | Status (status) | Version scheme (versionType) | Exclusive end (lessThan) | Inclusive end (lessThanOrEqual) | Status changes (at → status) |
|---|---|---|---|---|---|
| 3.24.24.24 | affected | custom | 3.24.24.24 | Unavailable | None listed |
| 3.21.26.22 | affected | custom | 3.21.26.22 | Unavailable | None listed |
| 3.22.22.22 | affected | custom | 3.22.22.22 | Unavailable | None listed |
| 3.21.25.22 | affected | custom | 3.21.25.22 | Unavailable | None listed |