vulnerability
Dell iDRAC: CVE-2022-34435: DSA-2022-265: Dell iDRAC8 and Dell iDRAC9 Security Update for a RACADM Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:L/Au:M/C:N/I:P/A:N) | Nov 14, 2022 | Nov 3, 2023 | Nov 26, 2025 |
Severity
3
CVSS
(AV:N/AC:L/Au:M/C:N/I:P/A:N)
Published
Nov 14, 2022
Added
Nov 3, 2023
Modified
Nov 26, 2025
Description
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker may potentially exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
Solution
dell-idrac-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.