38 matches found
CVE-2024-38489
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service partial event...
CVE-2024-38489
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service partial event...
CVE-2024-25948
Dell iDRAC Service Module (DSM) 5.3.0.0 and earlier contains an out-of-bounds write vulnerability that a local privileged attacker could exploit to execute arbitrary code, potentially causing a denial of service. Affected product: DSM on Dell PowerEdge servers. Root cause: out-of-bounds write. Im...
CVE-2024-25947
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...
CVE-2024-25947
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...
CVE-2024-25947
Dell iDRAC Service Module versions 5.3.0.0 and earlier are affected by CVE-2024-25947, described as an Out-of-bounds Read vulnerability enabling a privileged local attacker to execute arbitrary code and potentially cause a denial of service. Connected sources also reference related out-of-bounds ...
Dell iDRAC Service Module Out-of-Bounds Read Vulnerability (CNVD-2024-34489)
The Dell iDRAC Service Module is a lightweight software module from Dell USA designed to run on Dell PowerEdge servers to enhance the functionality of iDRAC Integrated Dell Remote Access Controller. An out-of-bounds read vulnerability exists in Dell iDRAC Service Module 5.3.0.0 and earlier...
CVE-2024-38481: Out-of-bounds Read
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...
CVE-2024-38489: Out-of-bounds Write
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service partial event...
CVE-2024-25947: Out-of-bounds Write
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...
CVE-2024-38490: Out-of-bounds Write
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...
CVE-2024-25948: Out-of-bounds Write
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event...
PT-2024-5580 · Dell · Idrac Service Module
Name of the Vulnerable Software and Affected Versions: Dell iDRAC Service Module versions 5.3.0.0 and prior Description: The issue is related to an out of bounds write operation in the memory, which could allow an attacker to execute arbitrary code or cause a denial of service. A privileged local...
Dell iDRAC Service Module < 5.3.0.0 Privilege Escalation
The Dell iDRAC Service Module on Windows, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest...
Dell iDRAC9 Security Vulnerability
The Dell iDRAC9 is a Dell offering that provides comprehensive, embedded management, and automation capabilities across the PowerEdge family of servers. A controller. A security vulnerability exists in Dell iDRAC Service Module 5.2.0.0 and prior versions, which originates from a vulnerability tha...
CVE-2024-22428: Incorrect Default Permissions
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity...
CVE-2018-11053
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system /etc/hosts to world writable. A malicious low privileged operating system user or process...
CVE-2018-11053: Incorrect Permission Assignment for Critical Resource
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system /etc/hosts to world writable. A malicious low privileged operating system user or process...