Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to code execution and elevation of privileges.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2025-38743 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the buffer access in the Dell iDRAC Service Module. By sending specially crafted requests, the attacker may execute arbitrary code and gain elevated privileges on the affected system.
Affected Products
- Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0: This product is vulnerable due to improper handling of buffer access, allowing for potential code execution.
Mitigation
To mitigate this vulnerability, users should upgrade to Dell iDRAC Service Module version 6.0.3.0 or later. Regularly applying security updates and patches is essential to protect against known vulnerabilities.