CVE-2022-34435
18.01.2023, 12:15
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.Enginsight
Vendor | Product | Version |
---|---|---|
dell | idrac9_firmware | 𝑥 < 6.00.30.00 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration