DSA-2026-077: Security Update for Dell iDRAC Service Module Vulnerability
Riepilogo: Dell iDRAC Service Module remediation is available for a privilege escalation vulnerability that could be exploited by malicious users to compromise the affected system.
Questo articolo si applica a
Questo articolo non si applica a
Questo articolo non è legato a un prodotto specifico.
Non tutte le versioni del prodotto sono identificate in questo articolo.
Impatto
High
Dettagli
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-23856 |
Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.8 |
|
Proprietary Code CVEs |
Description |
CVSS Base Score |
CVSS Vector String |
|
CVE-2026-23856 |
Dell iDRAC Service Module (iSM) for Windows, versions prior to 6.0.3.1, and Dell iDRAC Service Module (iSM) for Linux, versions prior to 5.4.1.1, contain an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges. |
7.8 |
Prodotti interessati e correzione
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
iDRAC Service Module for Windows |
Versions prior to 5.4.1.1 |
Version 5.4.1.1 or later |
Dell EMC iDRAC Service Module for Win, v5.4.1.1 | Driver Details | Dell US |
|
iDRAC Service Module for Windows |
Versions prior to 6.0.3.1 |
Version 6.0.3.1 or later |
Dell iDRAC Service Module for Win, v6.0.3.1 | Driver Details | Dell US |
|
iDRAC Service Module for Linux |
Versions prior to 5.4.1.1 |
Version 5.4.1.1 or later |
Dell iDRAC Service Module for Linux, v5.4.1.1 | Driver Details | Dell US |
|
Product |
Affected Versions |
Remediated Versions |
Link |
|
iDRAC Service Module for Windows |
Versions prior to 5.4.1.1 |
Version 5.4.1.1 or later |
Dell EMC iDRAC Service Module for Win, v5.4.1.1 | Driver Details | Dell US |
|
iDRAC Service Module for Windows |
Versions prior to 6.0.3.1 |
Version 6.0.3.1 or later |
Dell iDRAC Service Module for Win, v6.0.3.1 | Driver Details | Dell US |
|
iDRAC Service Module for Linux |
Versions prior to 5.4.1.1 |
Version 5.4.1.1 or later |
Dell iDRAC Service Module for Linux, v5.4.1.1 | Driver Details | Dell US |
The Affected Products and Remediation table above may not be a comprehensive list of all affected supported versions and may be updated as more information becomes available.
Cronologia delle revisioni
|
Revision |
Date |
Description |
|
1.0 |
2026-02-10 |
Initial Release |
Ringraziamenti
Dell would like to thank falconCorrup for reporting this issue.
Informazioni correlate
Dichiarazione di non responsabilità
Prodotti interessati
iDRAC Service Module 1.x, iDRAC Service Module 2.x, iDRAC Service Module 4.x, iDRAC Service Module 5.x, iDRAC Service Module 3.xProprietà dell'articolo
Numero articolo: 000426282
Tipo di articolo: Dell Security Advisory
Ultima modifica: 10 feb 2026
Trova risposta alle tue domande dagli altri utenti Dell
Support Services
Verifica che il dispositivo sia coperto dai Servizi di supporto.