Product:
Integrated Dell Remote Access Controller
Summary
Dell Integrated Dell Remote Access Controller versions prior to 7.00.00.181 for 9, 6.10.80.00 through 7.20.10.50 for 14G, and versions prior to 1.20.25.00 for 10, 17G contain a Path Traversal vulnerability. A high privileged attacker with remote access could exploit this vulnerability, leading to unauthorized access.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 6.7 | CVE-2025-22397 |
Exploitation
To exploit this vulnerability, an attacker with high privileges and remote access can manipulate the pathname to gain access to restricted directories. This can be achieved by sending specially crafted requests that bypass the intended directory restrictions, allowing the attacker to access sensitive information or execute unauthorized commands.
Affected Products
- Integrated Dell Remote Access Controller 9: Versions prior to 7.00.00.181
- Integrated Dell Remote Access Controller 14G: Versions 6.10.80.00 through 7.20.10.50
- Integrated Dell Remote Access Controller 10: Versions prior to 1.20.25.00
- Integrated Dell Remote Access Controller 17G: Versions prior to 1.20.25.00
Mitigation
To mitigate this vulnerability, users should update their Integrated Dell Remote Access Controller to the latest versions as specified in the security update. Regularly applying security patches and monitoring access logs can also help in identifying and preventing unauthorized access.