Dell iDRAC Service Module Incorrect Permission Assignment Vulnerability Allowing Code Execution

A vulnerability exists in Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0, due to incorrect permission assignments for critical resources. This vulnerability allows a low-privileged attacker with local access to potentially execute code on the affected system.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the affected system.

Remediation

Users can upgrade to Dell iDRAC Service Module version 6.0.3.0 or later. The update is available through the Dell iDRAC Service Module for Windows, v6.0.3.0.