Dell Integrated Dell Remote Access Controller Sensitive Information Exposure Vulnerability

A vulnerability allowing the exposure of sensitive system information due to uncleared debug information has been identified in Dell Integrated Dell Remote Access Controller (iDRAC) 9, 14G versions prior to 7.00.00.174, and 15G and 16G versions prior to 7.10.90.00. This vulnerability could be exploited by a high-privileged attacker with remote access, leading to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive system information.

Remediation

Users can upgrade to iDRAC9 versions 7.00.00.174 or 7.10.90.00 or later. Instructions for downloading the update are available on the Dell Support website.