DSA-2025-311: Security Update for Dell iDRAC Service Module Vulnerabilities

Sammendrag: Dell iDRAC Service Module remediation is available for multiple security vulnerabilities that could be exploited by malicious users to compromise the affected system.

Denne artikkelen gjelder for Denne artikkelen gjelder ikke for Denne artikkelen er ikke knyttet til noe bestemt produkt. Det er ikke produktversjonene som identifiseres i denne artikkelen.
Ta en titt på andre ressurser

Påvirkning

High

Detaljer

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2025-38742

Dell iDRAC Service Module (iSM), version 6.0.1.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

5.3

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-38743

Dell iDRAC Service Module (iSM), version 6.0.1.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

 

Proprietary Code CVEs

Description

CVSS Base Score

CVSS Vector String

CVE-2025-38742

Dell iDRAC Service Module (iSM), version 6.0.1.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

5.3

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LThis hyperlink is taking you to a website outside of Dell Technologies.

CVE-2025-38743

Dell iDRAC Service Module (iSM), version 6.0.1.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.

7.8

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HThis hyperlink is taking you to a website outside of Dell Technologies.

 

Dell Technologies anbefaler at alle kunder tar hensyn til både grunnpoengsummen og alle relevante, midlertidige og miljømessige resultater som kan påvirke den potensielle alvorlighetsgraden knyttet til bestemte sikkerhetsproblemer.

Berørte produkter og utbedring

Product

Affected Versions

Remediated Versions

Link

iDRAC Service Module

Version 6.0.1.0

Version 6.0.3.0 or later

Dell iDRAC Service Module for Windows, v6.0.3.0 | Driver Details | Dell US

 

Product

Affected Versions

Remediated Versions

Link

iDRAC Service Module

Version 6.0.1.0

Version 6.0.3.0 or later

Dell iDRAC Service Module for Windows, v6.0.3.0 | Driver Details | Dell US

 

  • The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.

Endringshistorikk

Revision

Date

Description

1.0

2025-08-21

Initial Release

2.0

2025-09-16

Updated the affected versions

 

Relatert informasjon

Dell Security Advisories and Notices
Dell Vulnerability Response Policy
CVSS Scoring Guide

Juridisk ansvarsfraskrivelse

Berørte produkter

iDRAC Service Module 6.x
Artikkelegenskaper
Artikkelnummer: 000359617
Artikkeltype: Dell Security Advisory
Sist endret: 16 sep. 2025
Få svar på spørsmålene dine fra andre Dell-brukere
Støttetjenester
Sjekk om enheten din er dekket av støttetjenestene.