Product:
iDRAC10
Summary
Dell iDRAC10 contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low-privileged attacker to gain elevated access. This could lead to unauthorized access to sensitive information and system controls.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 7.1 | CVE-2026-35155 |
Exploitation
To exploit this vulnerability, an attacker must be authenticated with low privileges. By leveraging the race condition, the attacker can manipulate the timing of requests to gain elevated access, potentially compromising the system’s integrity and confidentiality.
Affected Products
- iDRAC10 versions 1.20.70.50 and 1.30.05.10: These versions are specifically affected by the vulnerability, allowing for potential unauthorized access if exploited.
Mitigation
To mitigate this vulnerability, it is recommended to update to the latest version of iDRAC10 that addresses the issue. Additionally, restricting access to the iDRAC interface and monitoring for unusual activity can help reduce the risk of exploitation.