CVE:CVE-2019-3764
CNNVD:CNNVD-201911-419
Dell EMC iDRAC9等都是美国戴尔（Dell）公司的产品。Dell EMC iDRAC9是一套包含硬件和软件的系统管理解决方案。Dell EMC iDRAC7是一套包含硬件和软件的系统管理解决方案。Dell EMC iDRAC8是一套包含硬件和软件的系统管理解决方案。
Dell EMC iDRAC7 2.65.65.65之前版本、iDRAC8 2.70.70.70之前版本和iDRAC9 3.36.36.36之前版本中存在授权问题漏洞。该漏洞源于网络系统或产品中缺少身份验证措施或身份验证强度不足。
solution:Upgrade dell idrac7_firmware to a higher version than 2.65.65.65,and avoid the version (,2.65.65.65); Upgrade dell idrac8_firmware to a higher version than 2.70.70.70,and avoid the version (,2.70.70.70); Upgrade dell idrac9_firmware to a higher version than 3.36.36.36,and avoid the version (,3.36.36.36)