7.0
High
CVE-2024-22428 Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may…
Description
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iDRAC Service Module (iSM) 5.1 | 5.1.0.0 → 5.2.0.0 | No fix stated |
Other CVEs of iDRAC Service Module (iSM)
The 8 CVEs of iDRAC Service Module (iSM) →
CVE-2025-38743
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value…
7.8
High
CVE-2025-38742
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical…
5.3
Medium
CVE-2024-38481
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability
4.8
Medium
CVE-2024-38490
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability
5.8
Medium