Dell iDRAC Service Module (iSM): Buffer access with incorrect length in the in-band agent gives a low-privileged local

CVSS 7.8CVE-2025-38743Firmware, BMC & network fabriccurated

Impact

Buffer access with incorrect length in the in-band agent gives a low-privileged local attacker code execution and elevation on the host OS. iSM is the bridge between host and BMC, so it is a stepping stone from tenant workload toward out-of-band control.

Who can reach it

Any low-privilege local account on the server OS - including a container that escaped to the host.

What to do

Upgrade iSM to 6.0.3.0. Host package update plus service restart, no reboot and no firmware flash. Cheap - do it in the normal patch cycle. If you do not actually consume iSM telemetry, uninstall it instead.

References

https://www.dell.com/support/kbdoc/en-us/000359617/dsa-2025-311-security-update-for-dell-idrac-service-module-vulnerabilities

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.