Dell Idrac Service Module (Ism) vulnerabilities

8 vulnerabilities

Known vulnerabilities in Dell Idrac Service Module (Ism), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2025-38743dellemc_idrac_service_module+1
EPSS score
0.15%
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.5.3CVE-2025-38742dellemc_idrac_service_module+1
EPSS score
0.12%
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.4.8CVE-2024-25947dellemc_idrac_service_module+1
EPSS score
0.16%
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.4.8CVE-2024-25948dellemc_idrac_service_module+1
EPSS score
0.16%
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.4.8CVE-2024-38481dellemc_idrac_service_module+1
EPSS score
0.16%
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.4.4CVE-2024-38489dellemc_idrac_service_module+1
EPSS score
0.20%
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service (partial) event.5.8CVE-2024-38490dellemc_idrac_service_module+1
EPSS score
0.16%
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.7.8CVE-2024-22428dellemc_idrac_service_module+1
EPSS score
0.17%
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity.