Dell iDRAC10 Insufficiently Protected Credentials Vulnerability Allowing Elevated Access

A vulnerability allowing insufficiently protected credentials has been identified in Dell iDRAC10 versions 1.20.70.50 and 1.30.05.10. This vulnerability arises from a race condition, which could enable an authenticated low-privileged attacker to gain elevated access.

Impact

Exploitation of this vulnerability could lead to unauthorized elevation of privileges, allowing a low-privileged authenticated user to gain higher-level access rights.

Remediation

Users can upgrade to Dell iDRAC10 version 1.30.10.50 or later to address this vulnerability.