Dell iDRAC Service Module < 5.3.0.0 Privilege Escalation

The Dell iDRAC Service Module on Windows, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest...

Integrated Dell Remote Access Controller (iDRAC) Service Module Installed (Windows)

Binary data dellidracservicemodulewininstalled.nbin...

CVE-2023-52112

Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-22428

Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity...

Design/Logic Flaw

Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity...

CVE-2024-22428

Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity...

CVE-2024-22428

Dell iDRAC Service Module versions 5.2.0.0 and prior contain an Incorrect Default Permissions vulnerability that may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. The root cause is inadequate default permissions on the module, enabling l...

CVE-2024-22428

Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity...

Dell iDRAC9 Security Vulnerability

The Dell iDRAC9 is a Dell offering that provides comprehensive, embedded management, and automation capabilities across the PowerEdge family of servers. A controller. A security vulnerability exists in Dell iDRAC Service Module 5.2.0.0 and prior versions, which originates from a vulnerability tha...

CVE-2023-52112: Files or Directories Accessible to External Parties

Unauthorized file access vulnerability in the wallpaper service module. Successful exploitation of this vulnerability may cause features to perform abnormally...

CVE-2024-22428: Incorrect Default Permissions

Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity...

PT-2024-19416 · Dell · Idrac Service Module

Name of the Vulnerable Software and Affected Versions: Dell iDRAC Service Module versions 5.2.0.0 and prior Description: The issue is related to Incorrect Default Permissions, which may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system...

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

CVE-2023-46772: Out-of-bounds Write

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

PT-2023-30202 · Unknown · Qmi Service Module

Name of the Vulnerable Software and Affected Versions: QMI service module affected versions not specified Description: The issue is related to parameters being out of the value range in the QMI service module. Successful exploitation may cause errors in reading file data. Recommendations: At the...

MediaTek Chip Security Breach

MediaTek chips are a variety of chips from MediaTek, a Chinese company. A security vulnerability exists in the MediaTek chips, which stems from an improper input validation issue in the bluethooth service module, which may result in out-of-bounds reads...

PT-2023-26668 · Unknown · Dolibarr Erp/Crm

Name of the Vulnerable Software and Affected Versions: Dolibarr ERP CRM versions 17.0.1 and earlier Description: The issue allows a remote attacker to obtain sensitive information and execute arbitrary code via the REST API module. This is related to analyseVarsForSqlAndScriptsInjection and...

CVE-2023-39391

Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Zilight Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a possible lack of privilege checking in the Contacts Service module...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Unisoc Corporation. A security vulnerability exists in UNISOC Chipsets due to a possible lack of privilege checking in the Contacts service module...