Dell iDRAC9 Session Hijack via IPMI Before v7.10.50 (Arbitrary Execution)
CVE-2024-25943 Published on June 29, 2024
iDRAC9, versions prior to 7.00.00.172 for 14th Generation and 7.10.50.00 for 15th and 16th Generations, contains a session hijacking vulnerability in IPMI. A remote attacker could potentially exploit this vulnerability, leading to arbitrary code execution on the vulnerable application.
Vulnerability Analysis
CVE-2024-25943 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a small impact on confidentiality, a high impact on integrity, and a small impact on availability.
Weakness Type
Use of Insufficiently Random Values
The software uses insufficiently random numbers or values in a security context that depends on unpredictable numbers. When software generates predictable values in a context requiring unpredictability, it may be possible for an attacker to guess the next value that will be generated, and use this guess to impersonate another user or access sensitive information.
Products Associated with CVE-2024-25943
Want to know whenever a new CVE is published for Dell Idrac9? stack.watch will email you.
Affected Versions
Integrated Dell Remote Access Controller 9:- Before 7.00.00.172 is affected.
- Before 7.10.50.00 is affected.
- Before 7.00.00.172 is affected.
- Before 7.10.50.00 is affected.
Exploit Probability
EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.