Skip to content
Sign in
2.7 Low

CVE-2022-34435 Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the…

Description

Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.

Affected products and versions

Product Affected versions Fixed in
Integrated Dell Remote Access Controller 9 6.00 earliest → 6.00.02.00 No fix stated

Other CVEs of Integrated Dell Remote Access Controller 9

The 3 CVEs of Integrated Dell Remote Access Controller 9 →
CVE-2024-25943 iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a… 7.6 High CVE-2022-24422 Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability 9.6 Critical
Track this CVE