vulnerability
Dell iDRAC: CVE-2022-34435: DSA-2023-142: Dell Precision Workstation Security Update for an iDRAC9 with Lifecycle Controller Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:L/Au:M/C:N/I:P/A:N) | Nov 14, 2022 | Nov 3, 2023 | Nov 8, 2023 |
Severity
3
CVSS
(AV:N/AC:L/Au:M/C:N/I:P/A:N)
Published
Nov 14, 2022
Added
Nov 3, 2023
Modified
Nov 8, 2023
Description
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
Solution
dell-idrac-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.