CVE-2022-24423
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2022-24423
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability to cause resource exhaustion in the webserver, resulting in a denial of service condition.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
输入验证不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Dell iDRAC8 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dell iDRAC8是美国戴尔（Dell）公司的一个控制器。提供提供整个的PowerEdge系列服务器全面，嵌入式管理，自动化功能。 Dell EMC iDRAC8 2.81.81 版本及之前版本存在输入验证错误漏洞。未经身份验证的远程攻击者可能会利用此漏洞导致资源耗尽，从而导致拒绝服务 (DoS) 状况。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Dell | Integrated Dell Remote Access Controller 8 | unspecified ~ 2.83.83.83 | - |
II. Public POCs for CVE-2022-24423
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-24423
请登录查看更多情报信息。
- https://www.dell.com/support/kbdoc/en-us/000198064/dsa-2022-069x_refsource_MISC
- https://nvd.nist.gov/vuln/detail/CVE-2022-24423
Same Patch Batch · Dell · 2022-04-21 · 4 CVEs total
| CVE-2022-26856 | 8.2 HIGH | DELL EMC Repository Manager 安全漏洞 |
| CVE-2022-24424 | 7.5 HIGH | DELL EMC AppSync 路径遍历漏洞 |
| CVE-2022-22558 | 5.7 MEDIUM | Dell PowerEdge Server BIOS 缓冲区错误漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2022-24423
No comments yet