Dell Integrated Dell Remote Access Controller 9 vulnerabilities
5 vulnerabilities
Known vulnerabilities in Dell Integrated Dell Remote Access Controller 9, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2021-36348dellintegrated_dell_remote_access_controller_9_firmware+1
EPSS score1.13%
iDRAC9 versions prior to 5.00.20.00 contain an input injection vulnerability. A remote authenticated malicious user with low privileges may potentially exploit this vulnerability to cause information disclosure or denial of service by supplying specially crafted input data to iDRAC.CVE-2021-36347dellintegrated_dell_remote_access_controller_8_firmware+2EPSS score2.21%
iDRAC9 versions prior to 5.00.20.00 and iDRAC8 versions prior to 2.82.82.82 contain a stack-based buffer overflow vulnerability. An authenticated remote attacker with high privileges could potentially exploit this vulnerability to control process execution and gain access to the iDRAC operating system.CVE-2022-24422dellidrac9_firmware+1EPSS score58.54%
Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console.CVE-2022-34435dellidrac9_firmware+1EPSS score0.51%
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.CVE-2024-25943dellidrac9_firmware+1EPSS score0.66%
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.