Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and elevation of privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-38743 |
Exploitation
To exploit this vulnerability, an attacker with low privileges must have local access to the affected system. By manipulating the buffer access with an incorrect length value, the attacker can execute arbitrary code and potentially elevate their privileges on the system.
Affected Products
- Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0: This product is vulnerable due to the buffer access issue, allowing for potential code execution and privilege escalation.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell iDRAC Service Module version 6.0.3.0 or later. Regularly applying security updates and patches is essential to protect against known vulnerabilities.