Dell iDRAC Service Module Buffer Access Vulnerability Leading to Code Execution and Privilege Escalation

A buffer access vulnerability with an incorrect length value has been identified in Dell iDRAC Service Module (iSM) versions prior to 6.0.3.0. This vulnerability allows a low privileged attacker with local access to potentially exploit the issue, leading to code execution and elevation of privileges.

Impact

Exploitation of this vulnerability could result in unauthorized code execution and elevated privileges on the affected system.

Remediation

Users can upgrade to Dell iDRAC Service Module version 6.0.3.0 or later. The updated version is available through the Dell iDRAC Service Module for Windows driver details page.