vulnerability
Dell iDRAC: CVE-2022-34435: DSA-2022-265: Dell iDRAC8 and Dell iDRAC9 Security Update for a RACADM Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 3 | (AV:N/AC:L/Au:M/C:N/I:P/A:N) | Nov 14, 2022 | Nov 3, 2023 | Nov 26, 2025 |
Severity
3
CVSS
(AV:N/AC:L/Au:M/C:N/I:P/A:N)
Published
Nov 14, 2022
Added
Nov 3, 2023
Modified
Nov 26, 2025
Description
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker may potentially exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
Solution
dell-idrac-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.