Dell iDRAC Service Module (incorrect default permissions): Weak default folder permissions let an unprivileged local

CVE-2024-22428Firmware, BMC & network fabriccurated

Impact

Weak default folder permissions let an unprivileged local user escalate and execute code on the host.

Who can reach it

Any local unprivileged user on a server running iSM 5.2.0.0 or earlier.

What to do

Upgrade iSM past 5.2.0.0. Host package update; no reboot required.

References

https://www.dell.com/support/kbdoc/en-us/000221129/dsa-2024-018-security-update-for-dell-idrac-service-module-for-weak-folder-permission-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.