vulnerability

Dell iDRAC: CVE-2020-5366: DSA-2020-128: iDRAC Local File Inclusion Vulnerability

Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Jul 7, 2020
Added
Nov 3, 2023
Modified
Sep 23, 2025

Description

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files.

Solution

dell-idrac-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.