Product:
PowerEdge Server BIOS and iDRAC9
Summary
Dell PowerEdge Server BIOS and Dell iDRAC9 contain an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure. This could allow unauthorized access to sensitive information.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.9 | CVE-2025-26482 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and remote access to the affected systems. By leveraging these access rights, the attacker can potentially extract sensitive information from the system, which could lead to further attacks or data breaches.
Affected Products
- PowerEdge Server BIOS: All versions are affected by the Information Disclosure vulnerability.
- iDRAC9: All versions are also vulnerable to the same Information Disclosure issue.
Mitigation
To mitigate this vulnerability, it is recommended to apply the latest security updates provided by Dell. Regularly updating systems and monitoring for unauthorized access can help reduce the risk of exploitation.