CVE-2025-22397

🗓️ 06 Nov 2025 18:46:04Reported by dellType

High privileged remote attacker can exploit path traversal in Dell iDRAC to gain unauthorized access

Reporter	Title	Published	Views	Family All 8
CNNVD	Dell iDRAC9和Dell iDRAC10 路径遍历漏洞	6 Nov 202500:00	–	cnnvd
Cvelist	CVE-2025-22397	6 Nov 202518:46	–	cvelist
EUVD	EUVD-2025-38153	6 Nov 202521:31	–	euvd
NVD	CVE-2025-22397	6 Nov 202519:15	–	nvd
Positive Technologies	PT-2025-45349	6 Nov 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-22397	7 Nov 202519:58	–	redhatcve
Tenable Nessus	Dell iDRAC9 and iDRAC10 Path Traversal (CVE-2025-22397)	6 Feb 202600:00	–	nessus
Vulnrichment	CVE-2025-22397	6 Nov 202518:46	–	vulnrichment

NVD

Vulners

Node

dell idrac9_firmwareRange6.10.80.00–7.00.00.181

dell idrac9_firmwareRange7.00.00.183–7.20.10.50

AND

dell idrac9Match-

Node

dell idrac10_firmwareRange<1.20.25.00

AND

dell idrac10Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "Integrated Dell Remote Access Controller 9 14G Versions",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "7.00.00.181",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Integrated Dell Remote Access Controller 9 15G and 16G versions",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "7.20.10.50",
        "status": "affected",
        "version": "6.10.80.00",
        "versionType": "semver"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Integrated Dell Remote Access Controller 10 17G version",
    "vendor": "Dell",
    "versions": [
      {
        "lessThan": "1.20.25.00",
        "status": "affected",
        "version": "N/A",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
dell	www.dell.com/support/kbdoc/en-us/000384516/dsa-2025-376-security-update-for-dell-idrac9-and-idrac10-vulnerabilities

21 Jan 2026 20:07Current

6.2Medium risk

Vulners AI Score6.2

CVSS 3.14.9 - 6.7

EPSS0.0017

SSVC

CWE-22