iDRAC Service Module (iSM) vulnerabilities

2 known vulnerabilities in iDRAC Service Module (iSM) from Dell. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  iDRAC Service Module (iSM): Buffer Access with Incorrect Length Value

  CVE-2025-38743Aug 21, 2025Dell

  Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of

• 7.8 High severity

  iDRAC Service Module (iSM): Incorrect Default Permissions

  CVE-2024-22428Jan 16, 2024Dell

  Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at