vulnerability

Dell iDRAC: CVE-2022-34435: DSA-2023-142: Dell Precision Workstation Security Update for an iDRAC9 with Lifecycle Controller Vulnerability

Severity
3
CVSS
(AV:N/AC:L/Au:M/C:N/I:P/A:N)
Published
Nov 14, 2022
Added
Nov 3, 2023
Modified
Nov 8, 2023

Description

Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.

Solution

dell-idrac-upgrade-latest
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.