CVEvulnerability

CVE-2024-25943

9.8 CRITICAL Published 2024-06-29 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2024-06-29
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:H/A:L
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-330

Description

iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.

Affected configurations

• dell idrac9 (< 7.00.00.172) • dell idrac9 (< 7.10.50.00)

Related

Weakness · CWE (1)

  • CWE-330 Use of Insufficiently Random Values weakness

References