← Back

CVE-2026-35155

nvd nist
Published: Apr 29, 2026Modified: Jun 17, 2026

JSON object

Loading...
7.1
Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Exploitability: 1.2 / Impact: 5.9
Source: security_alert@emc.com (Secondary)

Description

Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.

Affected (1)

Dell
1 product
Idrac10 Firmware
Configuration A
1 vulnerable · 1 platform
Vulnerable SoftwareAffected Versions
Idrac10 Firmware
Before 1.30.10.50
Running on/withPlatform Versions
Dell
Idrac10
All versions

Related CWEs

CWE-522
Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.

References (1)

Source: security_alert@emc.com
Vendor Advisory

Timeline

No history available yet.