CVE Feed

    Dashboard / CVE / CVE-2020-5366

    CVE-2020-5366

    Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files.

    Published:Jul 9, 2020
    Last Modified:Nov 21, 2024
    EPS:Jul 9, 2020
    EPSS Score:0.00296
    CVSS Score:7.1

    Affected Products

    Vendor
    Dell
    Product
    Idrac9
    Vendor
    Dell
    Product
    Idrac9 Firmware

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-23855 (CVSS 7.2) — Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G ve…
    CVE-2026-79940 (CVSS 5.9) — Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper …
    CVE-2026-70412 (CVSS 3.5) — Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent D…
    CVE-2025-22397 (CVSS 6.7) — Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.…
    CVE-2025-26482 (CVSS 4.9) — Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A …
    CVE-2024-25943 (CVSS 7.6) — iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contai…
    CVE-2022-34435 (CVSS 2.7) — Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when th…
    CVE-2022-24422 (CVSS 9.6) — Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerab…
    CVE-2020-26198 (CVSS 6.1) — Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerabi…
    CVE-2020-5344 (CVSS 7) — Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High