Hello I'm not aware of any plans to address those vulnerabilities. A feature of the iDRAC is IPMI. Those are IPMI vulnerabilities. IPMI is not something we designed, it is an industry standard specification. If a newer version of IPMI that is more secure is released we will likely use it. If you are not using IPMI over LAN then you should be able to disable that feature on the iDRAC. That will stop the use of IPMI over the network. IPMI can still be used from within the host operating system with that option disabled. That should stop it from being flagged as a network vulnerability. Thanks
Hi, We have the latest firmware available applied to our iDrac7, however our security team have been doing scans and found CVE-2013-4786, CVE-2013-4037 vulnerabilities against the latest firmware.  Are there any plans to address these CVE's in a future update? Many thanks Martin
iDrac 7 in an R620