DSA-2025-046: Security Update for Dell PowerEdge Server and Dell iDRAC9 for Information Disclosure Vulnerability
Summary:Dell PowerEdge Server BIOS and iDRAC9 remediation is available for an Information Disclosure Vulnerability that could be exploited by malicious users to compromise the affected system.
Please select a product to check article relevancy
This article applies to This article does not apply toThis article is not tied to any specific product.Not all product versions are identified in this article.
Dell recommends that customers apply both the PowerEdge 14G/15G/16G Intel/AMD platforms BIOS along with the iDRAC9 firmware versions to ensure complete mitigation. Customers should consider this review as part of their decision-making process when determining whether to apply the patch.
Details
Proprietary Code CVEs
Description
CVSS Base Score
CVSS Vector String
CVE-2025-26482
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.
Dell Technologies recommends all customers consider both the CVSS base score and any relevant temporal and environmental scores that may impact the potential severity associated with a particular security vulnerability.
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.