Idrac10
Monthly
OS command injection in Dell iDRAC9 and iDRAC10 baseboard management controllers permits a high-privileged remote attacker to execute arbitrary operating system commands on the BMC firmware layer. Affected generations span iDRAC9 14G (pre-7.00.00.184), iDRAC9 15G/16G (pre-7.30.10.50), and iDRAC10 17G (pre-1.30.30.50). Dell has released patched firmware across all affected generations; no public exploit or active exploitation is identified at time of analysis.
Privilege escalation in Dell iDRAC10 (baseboard management controller firmware) versions 1.20.70.50 and 1.30.05.10 lets an already-authenticated low-privileged user exploit a race condition against insufficiently protected credentials to obtain elevated access to the server management controller. The flaw carries a CVSS 3.1 score of 7.1 with total confidentiality, integrity, and availability impact on the affected component. There is no public exploit identified at time of analysis and EPSS rates near-term exploitation at only 0.01%, but Dell has shipped a fix.
OS command injection in Dell iDRAC9 and iDRAC10 baseboard management controllers permits a high-privileged remote attacker to execute arbitrary operating system commands on the BMC firmware layer. Affected generations span iDRAC9 14G (pre-7.00.00.184), iDRAC9 15G/16G (pre-7.30.10.50), and iDRAC10 17G (pre-1.30.30.50). Dell has released patched firmware across all affected generations; no public exploit or active exploitation is identified at time of analysis.
Privilege escalation in Dell iDRAC10 (baseboard management controller firmware) versions 1.20.70.50 and 1.30.05.10 lets an already-authenticated low-privileged user exploit a race condition against insufficiently protected credentials to obtain elevated access to the server management controller. The flaw carries a CVSS 3.1 score of 7.1 with total confidentiality, integrity, and availability impact on the affected component. There is no public exploit identified at time of analysis and EPSS rates near-term exploitation at only 0.01%, but Dell has shipped a fix.