vulnerability

Dell iDRAC: CVE-2022-34435: DSA-2022-265: Dell iDRAC8 and Dell iDRAC9 Security Update for a RACADM Vulnerability

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:L/Au:M/C:N/I:P/A:N)

Published

Nov 14, 2022

Added

Nov 3, 2023

Modified

Nov 26, 2025

Description

Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker may potentially exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.

Solution

dell-idrac-upgrade-latest

References

https://www.dell.com/support/kbdoc/en-us/000205346/dsa-2022-265-dell-idrac8-and-dell-idrac9-security-update-for-a-racadm-vulnerability
CVE-2022-34435
https://attackerkb.com/topics/CVE-2022-34435
CWE-20

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report