Dell iDRAC Service Module (iSM) < 5.4.1.1 / 6.0.3.1 Elevation of Privilege (DSA-2026-077)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(298968);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/18");

  script_cve_id("CVE-2026-23856");
  script_xref(name:"IAVB", value:"2026-B-0045");

  script_name(english:"Dell iDRAC Service Module (iSM) < 5.4.1.1 / 6.0.3.1 Elevation of Privilege (DSA-2026-077)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Windows host has an installation of Dell iDRAC Service Module that is affected by an elevation of privilege vulnerability.");
  script_set_attribute(attribute:"description", value:
"According to its self-reported version, the Dell iDRAC Service Module (iSM) installation on the remote Windows host 
is affected by an improper access control vulnerability. A low-privileged attacker with local access could 
potentially exploit this vulnerability to gain elevated privileges on the system.

Note that Nessus has not tested for theseis issues but has instead relied only on the application's self-reported version
number.");
  # https://www.dell.com/support/kbdoc/en-us/000426282/dsa-2026-077-security-update-for-dell-idrac-service-module-vulnerability
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?7b00f376");
  script_set_attribute(attribute:"solution", value:
"Update Dell iDRAC Service Module to version 5.4.1.1, 6.0.3.1, or later.");
  script_set_cvss_base_vector("CVSS2#AV:L/AC:L/Au:S/C:C/I:C/A:C");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-23856");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/02/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/02/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/02/13");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:dell:idrac_service_module");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Windows");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("dell_idrac_service_module_win_installed.nbin");
  script_require_keys("installed_sw/iDRAC Service Module", "SMB/Registry/Enumerated");

  exit(0);
}


include('vdf.inc');

# @tvdl-content
var vuln_data = {
  'metadata': {'spec_version': '1.0'},
  'requires': [
    {'scope': 'target', 'match': {'os': 'windows'}}
  ],
  'checks': [
    {
      'product': {'name': 'iDRAC Service Module', 'type': 'app'},
      'check_algorithm': 'default',
      'constraints' : [
        { 'fixed_version' : '5.4.1.1' },
        { 'min_version' : '6.0.0.0', 'fixed_version' : '6.0.3.1' }
      ]
    }
  ]
};

var vdf_result = vdf::check_and_report(vuln_data:vuln_data, severity:SECURITY_WARNING);
vdf::handle_check_and_report_errors(vdf_result:vdf_result);