CVE Feed

    Dashboard / CVE / CVE-2024-25943

    CVE-2024-25943

    iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.

    Published:Jun 29, 2024
    Last Modified:Feb 3, 2025
    EPS:Jun 29, 2024
    EPSS Score:0.03049
    CVSS Score:7.6

    Affected Products

    Vendor
    Dell
    Product
    Idrac9

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-23855 (CVSS 7.2) — Dell iDRAC9, 14G versions prior to 7.00.00.184, 15G/16G versions prior to 7.30.10.50, and Dell iDRAC10, 17G ve…
    CVE-2026-79940 (CVSS 5.9) — Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper …
    CVE-2026-70412 (CVSS 3.5) — Dell iDRAC9, versions prior to 7.20.30.50, and Dell iDRAC10, version prior to 1.20.60.50, contain a Remanent D…
    CVE-2025-22397 (CVSS 6.7) — Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.…
    CVE-2025-26482 (CVSS 4.9) — Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A …
    CVE-2022-34435 (CVSS 2.7) — Dell iDRAC9 version 6.00.02.00 and prior contain an improper input validation vulnerability in Racadm when th…
    CVE-2022-24422 (CVSS 9.6) — Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerab…
    CVE-2020-26198 (CVSS 6.1) — Dell EMC iDRAC9 versions prior to 4.32.10.00 and 4.40.00.00 contain a reflected cross-site scripting vulnerabi…
    CVE-2020-5366 (CVSS 7.1) — Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated ma…
    CVE-2020-5344 (CVSS 7) — Dell EMC iDRAC7, iDRAC8 and iDRAC9 versions prior to 2.65.65.65, 2.70.70.70, 4.00.00.00 contain a stack-based …

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High