Product:
iDRAC Service Module
Summary
Dell iDRAC Service Module for Windows and Linux contains an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to elevation of privileges. This issue affects specific versions of the software, making it critical for users to be aware of their current installations.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.8 | CVE-2026-23856 |
Exploitation
To exploit this vulnerability, an attacker with local access can manipulate the iDRAC Service Module to gain elevated privileges. This can be achieved by executing specific commands or scripts that take advantage of the improper access control mechanisms in place. Successful exploitation allows the attacker to perform actions that would normally require higher privileges.
Affected Products
- iDRAC Service Module for Windows: Versions prior to 6.0.3.1 are affected by this vulnerability.
- iDRAC Service Module for Linux: Versions prior to 5.4.1.1 are also vulnerable.
Mitigation
To mitigate this vulnerability, users should update their iDRAC Service Module to the latest versions available. Regularly checking for updates and applying security patches can help protect against potential exploitation. It is also recommended to limit local access to systems running the affected software.