CVE:CVE-2018-1207
CNNVD:CNNVD-201803-909
Dell EMC iDRAC7和iDRAC8都是美国戴尔（Dell）公司的包含硬件和软件的系统管理解决方案。该方案为Dell PowerEdge系统提供远程管理、崩溃系统恢复和电源控制等功能。
Dell EMC iDRAC7和iDRAC8 2.52.52.52之前版本中存在安全漏洞。远程攻击者可借助CGI变量利用该漏洞执行代码。
solution:Upgrade dell emc_idrac7 to a higher version than 2.52.52.52,and avoid the version (,2.52.52.52); Upgrade dell emc_idrac8 to a higher version than 2.52.52.52,and avoid the version (,2.52.52.52)