Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Dell integrated Dell Remote Access Controller ausnutzen, um einen Denial of Service Angriff oder einen nicht spezifizierten Angriff durchzuführen.
Product
Der integrierte Dell Remote Access Controller (iDRAC) ermöglicht eine Out-of-Band-Verwaltung auf bestimmten Dell-Servern.
Vulnerabilities 2
-
Medium 6.7
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness
Nuvoton - CWE-305: Authentication Bypass by Primary Weakness An attacker with write access to the SPI-Flash on an NPCM7xx BMC subsystem that uses the Nuvoton BootBlock reference code can modify the u-boot image header on flash parsed by the BootBlock which co…
-
Medium 5.5
Gvariant offset table entry size is not checked in is_normal()
A flaw was found in GLib. GVariant deserialization fails to validate that the input conforms to the expected format, leading to denial of service.
Revision history
-
#2
Neue Updates von Dell aufgenommen
-
#1
Initiale Fassung
References
-
Dell Security Update for iDRAC9 vom 2024-06-24
https://www.dell.com/support/kbdoc/de-de/000226353/dsa-2024-223-security-update-for-dell-idrac9-vulnerability
-
Dell Security Update for iDRAC9 vom 2024-06-24
https://www.dell.com/support/kbdoc/de-de/000226356/dsa-2024-286-security-update-for-dell-idrac9-vulnerability
-
Dell Security Advisory DSA-2025-167 vom 2025-04-07
https://www.dell.com/support/kbdoc/de-de/000304933/dsa-2025-167-security-update-for-dell-avamar-data-store-gen5a-multiple-third-party-component-vulnerabilities