7.8
High
CVE-2025-38743 Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value…
Description
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| iDRAC Service Module (iSM) 6.0 | earliest → < 6.0.3.0 | 6.0.3.0 |
Other CVEs of iDRAC Service Module (iSM)
The 8 CVEs of iDRAC Service Module (iSM) →
CVE-2025-38742
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical…
5.3
Medium
CVE-2024-38481
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability
4.8
Medium
CVE-2024-38490
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability
5.8
Medium
CVE-2024-38489
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability
3.1
Low