4.8
Medium
CVE-2024-25948 Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability
Description
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iDRAC Service Module (iSM) 5.3 | earliest → 5.3.0.0 | No fix stated |
| emc_idrac_service_module 5.3 | earliest → < 5.3.0.0 | 5.3.0.0 |
Other CVEs of iDRAC Service Module (iSM)
The 8 CVEs of iDRAC Service Module (iSM) →
CVE-2025-38743
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value…
7.8
High
CVE-2025-38742
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical…
5.3
Medium
CVE-2024-38481
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability
4.8
Medium
CVE-2024-38490
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability
5.8
Medium