Dell iDRAC9 < 7.00.00.174 / 7.10.90.00 Information Disclosure (DSA-2026-113)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(303190);
  script_version("1.3");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/05/08");

  script_cve_id("CVE-2026-26948");
  script_xref(name:"IAVB", value:"2026-B-0070-S");

  script_name(english:"Dell iDRAC9 < 7.00.00.174 / 7.10.90.00 Information Disclosure (DSA-2026-113)");

  script_set_attribute(attribute:"synopsis", value:
"The remote Dell iDRAC9 is affected by an information disclosure vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Dell iDRAC9 installed on the remote host is affected by an information disclosure vulnerability as
referenced in the DSA-2026-113 advisory.

  - Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.174, 15G and 16G versions
    prior to 7.10.90.00, contain an Exposure of Sensitive System Information Due to Uncleared Debug Information
    vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability,
    leading to information disclosure. (CVE-2026-26948)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported
version number.");
  script_set_attribute(attribute:"see_also", value:"https://www.dell.com/support/kbdoc/en-us/000434533/dsa-2026-113");
  script_set_attribute(attribute:"solution", value:
"Upgrade to Dell iDRAC9 version 7.00.00.174 (14G) or 7.10.90.00 (15G/16G) or later.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:M/C:C/I:N/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-26948");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/03/17");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/03/17");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/03/20");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:dell:emc_idrac9");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("drac_detect.nasl");
  script_require_keys("installed_sw/iDRAC");

  exit(0);
}

include('vcf_extras.inc');
include('http.inc');

var port = get_http_port(default:443, embedded:TRUE);
var app_info = vcf::idrac::get_app_info(port:port);

var constraints = [
  { 'fixed_version' : '7.00.00.174', 'idrac' : '9' },
  { 'min_version' : '7.10.0.0', 'fixed_version' : '7.10.90.00', 'idrac' : '9' }
];

vcf::idrac::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_WARNING);