Dell PowerEdge Server and iDRAC9 Information Disclosure Vulnerability

A vulnerability allowing information disclosure exists in the BIOS of Dell PowerEdge Servers and in all versions of Dell iDRAC9. This issue can be exploited by a high-privileged attacker with remote access.

Impact

Exploitation of this vulnerability could lead to unauthorized information disclosure.

Remediation

Dell PowerEdge Server users should update to version 1.16.2 or later, while iDRAC9 users should upgrade to version 7.00.00.181 or 7.20.10.50 or later, depending on their current version.