DSA-2023-142: Dell Precision Workstation Security Update for an iDRAC9 with Lifecycle Controller Vulnerability
Summary: Dell iDRAC9 with Lifecycle Controller remediation is available for an improper input validation vulnerability that may be exploited by malicious users to compromise the affected system. ...
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Impact
Low
Details
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34435 | Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker may potentially exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update. | 2.7 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N |
| Proprietary Code CVEs | Description | CVSS Base Score | CVSS Vector String |
| CVE-2022-34435 | Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker may potentially exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update. | 2.7 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N |
Affected Products & Remediation
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2022-34435 | Precision 7920 Rack | iDRAC versions prior to 6.00.30.0 | iDRAC9 6.00.30.0 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=D92HF |
| 7920 XL Rack |
| CVEs Addressed | Product | Affected Versions | Updated Versions | Link to Update |
| CVE-2022-34435 | Precision 7920 Rack | iDRAC versions prior to 6.00.30.0 | iDRAC9 6.00.30.0 |
https://www.dell.com/support/home/drivers/driversdetails?driverId=D92HF |
| 7920 XL Rack |
Workarounds & Mitigations
None
Revision History
| Revision | Date | Description |
| 1.0 | 2023-04-27 | Initial Release |
| 1.1 | 2023-05-03 | Updated Affected Products and Remediation Section to include Product 7920 XL Rack |
Related Information
Legal Disclaimer
Affected Products
Precision 7920 Rack, Product Security InformationArticle Properties
Article Number: 000212525
Article Type: Dell Security Advisory
Last Modified: 04 May 2023
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.