Product:
Integrated Dell Remote Access Controller
Summary
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions prior to 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00 contain a Process Control vulnerability. A high privileged attacker with adjacent network access could potentially exploit this vulnerability, leading to code execution.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 5.3 | CVE-2026-26945 |
Exploitation
To exploit this vulnerability, an attacker must have high privileges and adjacent network access. By leveraging this access, the attacker can execute arbitrary code on the affected systems, potentially compromising their integrity and confidentiality.
Affected Products
- Integrated Dell Remote Access Controller 9 (versions prior to 7.00.00.181)
- Integrated Dell Remote Access Controller 14G (versions prior to 7.00.00.181)
- Integrated Dell Remote Access Controller 15G (versions prior to 7.20.10.50)
- Integrated Dell Remote Access Controller 16G (versions prior to 7.20.10.50)
- Integrated Dell Remote Access Controller 10 (versions prior to 1.20.25.00)
- Integrated Dell Remote Access Controller 17G (versions prior to 1.20.25.00)
Mitigation
To mitigate this vulnerability, users should upgrade their Integrated Dell Remote Access Controller to the latest versions specified in the advisory. Regularly applying security updates and monitoring network access can also help reduce the risk of exploitation.