Incorrect Default Permissions Vulnerability in Dell iDRAC Service Module
CVE-2024-22428

7HIGH

Key Information:

Vendor
Dell
Status
iDRAC Service Module (iSM)
Vendor
CVE Published:
16 January 2024

Summary

The Dell iDRAC Service Module versions 5.2.0.0 and earlier are susceptible to an incorrect default permissions vulnerability. This flaw can be exploited by a local unprivileged user to escalate their privileges, potentially leading to the execution of arbitrary code on the affected system. Users are strongly advised to update to the latest version to mitigate this security risk.

Affected Version(s)

iDRAC Service Module (iSM) 5.1.0.0

References

https://www.dell.com/support/kbdoc/en-us/000221129/dsa-20...
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.