low2.7
CVE-2022-34435
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set.
Impact
Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Idrac9 Firmware | before 6.00.30.00 |