DSA-2025-046: Security Update for Dell PowerEdge Server and Dell iDRAC9 for Information Disclosure Vulnerability
Résumé:Dell PowerEdge Server BIOS and iDRAC9 remediation is available for an Information Disclosure Vulnerability that could be exploited by malicious users to compromise the affected system.
Sélectionnez un produit pour vérifier la pertinence de l’article
Cet article concerne Cet article ne concerne pasCet article n’est associé à aucun produit spécifique.Toutes les versions du produit ne sont pas identifiées dans cet article.
Dell recommends that customers apply both the PowerEdge 14G/15G/16G Intel/AMD platforms BIOS along with the iDRAC9 firmware versions to ensure complete mitigation. Customers should consider this review as part of their decision-making process when determining whether to apply the patch.
Détails
Proprietary Code CVEs
Description
CVSS Base Score
CVSS Vector String
CVE-2025-26482
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.
Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.
Dell Technologies recommande à tous les clients de prendre en compte à la fois le score de base CVSS et les scores temporels et environnementaux pertinents qui peuvent avoir un impact sur la gravité potentielle associée à une faille de sécurité donnée.
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.