Skip to content
Sign in
2.7 Low

CVE-2022-34436 Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the…

Description

Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.

Affected products and versions

Product Affected versions Fixed in
Integrated Dell Remote Access Controller 8 2.83 earliest → 2.83.83.83 No fix stated

Other CVEs of Integrated Dell Remote Access Controller 8

The 3 CVEs of Integrated Dell Remote Access Controller 8 →
CVE-2024-25951 A command injection vulnerability exists in local RACADM 8.0 High CVE-2022-24423 Dell iDRAC8 versions prior to 2.83.83.83 contain a denial of service vulnerability 5.3 Medium
Track this CVE