PT-2024-2012 · Dell · Idrac8

Ncc Group · Published 2024-02-29 · Updated 2024-03-11 · CVE-2024-25951

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell Integrated Remote Access Controller 8 (iDRAC8) (affected versions not specified)

Description A command injection vulnerability exists in local RACADM, which is related to incorrect input validation. This issue can be exploited by a malicious authenticated user to gain control of the underlying operating system. The vulnerability allows a remote attacker to potentially take control of the system.

Recommendations As a temporary workaround, consider disabling the local RACADM until a patch is available. Restrict access to the local RACADM to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Command Injection

Weakness Enumeration

CWE-1288

CWE-77

Related Identifiers

BDU:2024-01873

CVE-2024-25951

Affected Products

Idrac8

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2024-25951 · Security Note
• https://bdu.fstec.ru/vul/2024-01873 · Security Note
• https://dell.com/support/kbdoc/en-us/000222591/dsa-2024-089-security-update-for-dell-idrac8-local-racadm-vulnerability · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-25951 · Vendor Advisory
• https://twitter.com/vuldb/status/1766443075340218811 · Twitter Post
• https://t.me/cvenotify/73423 · Telegram Post
• https://twitter.com/CVEnew/status/1766348283121721748 · Twitter Post
• https://twitter.com/cracbot/status/1766708331110961154 · Twitter Post
• https://twitter.com/RsSI47041968/status/1767272064967438468 · Twitter Post