DSA-2025-376: Security Update for Dell iDRAC9 and iDRAC10 Vulnerabilities
Summary: Dell iDRAC9 and iDRAC10 remediations are available for an arbitrary file export vulnerability that could be exploited by malicious users to compromise the affected system.
Impact
Medium
Details
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-22397 |
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. |
6.7 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2025-22397 |
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access. |
6.7 |
Affected Products & Remediation
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
iDRAC9 |
Versions prior to 7.00.00.181 |
Versions 7.00.00.181 or later |
https://www.dell.com/support/home/drivers/driversdetails?driverid=rvddr |
|
iDRAC9 |
Versions 6.10.80.00 to 7.20.10.50 |
Versions 7.20.10.50 or later |
https://www.dell.com/support/home/drivers/driversdetails?driverid=5mxxn |
|
iDRAC10 |
Versions prior to 1.20.25.00 |
Versions 1.20.25.00 or later |
https://www.dell.com/support/home/drivers/driversdetails?driverid=prndp |
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
iDRAC9 |
Versions prior to 7.00.00.181 |
Versions 7.00.00.181 or later |
https://www.dell.com/support/home/drivers/driversdetails?driverid=rvddr |
|
iDRAC9 |
Versions 6.10.80.00 to 7.20.10.50 |
Versions 7.20.10.50 or later |
https://www.dell.com/support/home/drivers/driversdetails?driverid=5mxxn |
|
iDRAC10 |
Versions prior to 1.20.25.00 |
Versions 1.20.25.00 or later |
https://www.dell.com/support/home/drivers/driversdetails?driverid=prndp |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Revision History
|
Revision |
Date |
Description |
|
1.0 |
2025-11-06 |
Initial Release |