Monthly
Dell iDRAC9 (prior to 7.20.30.50) and iDRAC10 (prior to 1.20.60.50) expose residual memory contents to low-privileged remote attackers due to improper memory sanitization classified under CWE-1330 (Remanent Data Readable after Memory Erase). Exploitation requires authenticated low-privilege access and user interaction, yielding limited confidentiality impact with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis, and Dell has released patched firmware versions per advisory DSA-2026-348.
Dell iDRAC9 (prior to 7.20.30.50) and iDRAC10 (prior to 1.20.60.50) expose residual memory contents to low-privileged remote attackers due to improper memory sanitization classified under CWE-1330 (Remanent Data Readable after Memory Erase). Exploitation requires authenticated low-privilege access and user interaction, yielding limited confidentiality impact with no integrity or availability consequence. No public exploit code or active exploitation has been identified at time of analysis, and Dell has released patched firmware versions per advisory DSA-2026-348.