CVE:CVE-2018-15776
CNNVD:CNNVD-201812-673
Dell EMC iDRAC7和iDRAC8都是美国戴尔（Dell）公司的包含硬件和软件的系统管理解决方案。该方案为Dell PowerEdge系统提供远程管理、崩溃系统恢复和电源控制等功能。
Dell EMC iDRAC7和iDRAC8 2.61.60.60之前版本中存在安全漏洞。物理位置接近的攻击者可利用该漏洞访问u-boot shell。
solution:Upgrade dell idrac7_firmware to a higher version than 2.61.60.60,and avoid the version (,2.61.60.60); Upgrade dell idrac8_firmware to a higher version than 2.61.60.60,and avoid the version (,2.61.60.60)