← Back

Emc Idrac Service Module

emc_idrac_service_module

Vendor: Dell • 9 CVEs

CVEs (9)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 21, 2025
N/A· v4
7.8 HIGH· v3
N/A· v2
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, le...Show more
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.Show less
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 21, 2025
N/A· v4
5.3 MEDIUM· v3
N/A· v2
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vuln...Show more
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.Show less
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service (partial) event.
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Aug 1, 2024
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
1Dell
1Emc Idrac Service Module
Jun 17, 2026
Jan 16, 2024
N/A· v4
7.8 HIGH· v3
N/A· v2
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected sys...Show more
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity. Show less
1Dell
1Emc Idrac Service Module
Nov 21, 2024
Jun 26, 2018
N/A· v4
6.5 MEDIUM· v3
4.0 MEDIUM· v2
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) t...Show more
Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating system (/etc/hosts) to world writable. A malicious low privileged operating system user or process could modify the host file and potentially redirect traffic from the intended destination to sites hosting malicious or unwanted content.Show less