Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2025-38742 |
Exploitation
To exploit this vulnerability, an attacker with low privileges must have local access to the affected system. By leveraging the incorrect permission assignment, the attacker can execute arbitrary code, potentially compromising the system’s integrity and confidentiality.
Affected Products
- Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0: This product is vulnerable due to incorrect permission assignments that allow local attackers to execute code.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell iDRAC Service Module version 6.0.3.0 or later, which addresses the incorrect permission assignment issue. Regularly updating software and monitoring for security advisories can help prevent exploitation.