Vulnerability Database

318,250

Total vulnerabilities in the database

CVE-2019-3706

Dell EMC iDRAC9 versions prior to 3.24.24.24, 3.21.26.22, 3.22.22.22 and 3.21.25.22 contain an authentication bypass vulnerability. A remote attacker may potentially exploit this vulnerability to bypass authentication and gain access to the system by sending specially crafted data to the iDRAC web interface.

  • Published: Apr 26, 2019
  • Updated: Nov 9, 2025
  • CVE: CVE-2019-3706
  • Severity: High
  • Exploit:

CVSS v2:

  • Severity: High
  • Score: 10
  • AV:N/AC:L/Au:N/C:C/I:C/A:C

No CWE or OWASP classifications available.

Software From Fixed in
dell / idrac9_firmware 3.20.21.20 3.20.21.20.x
dell / idrac9_firmware 3.21.24.22 3.21.24.22.x
dell / idrac9_firmware 3.23.23.23 3.23.23.23.x