Skip to content
Sign in
7.6 High

CVE-2024-25943 iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a…

Description

iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.

Affected products and versions

Product Affected versions Fixed in
Integrated Dell Remote Access Controller 9 7.10 earliest → < 7.10.50.00 7.10.50.00
Integrated Dell Remote Access Controller 9 7.00 earliest → < 7.00.00.172 7.00.00.172
integrated_dell_remote_access_controller_9_firmware 7.10 earliest → < 7.10.50.00 7.10.50.00
integrated_dell_remote_access_controller_9_firmware 7.00 earliest → < 7.00.00.172 7.00.00.172

Other CVEs of Integrated Dell Remote Access Controller 9

The 3 CVEs of Integrated Dell Remote Access Controller 9 →
CVE-2022-34435 Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the… 2.7 Low CVE-2022-24422 Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability 9.6 Critical
Track this CVE