Dell iDRAC Tools Improper Access Control Vulnerability Allowing Privilege Escalation

A vulnerability has been identified in Dell iDRAC Tools versions prior to 11.3.0.0, which involves improper access control. This vulnerability could be exploited by a low-privileged attacker with local access, potentially leading to unauthorized elevation of privileges.

Impact

Exploitation of this vulnerability could allow a low-privileged attacker with local access to gain elevated privileges on the affected system.

Remediation

Users are advised to upgrade to Dell iDRAC Tools version 11.3.0.0 or later. The updated version can be downloaded from the Dell Digital Locker. For full remediation, it is important to also upgrade to the correct Windows Server 2025 version.