Dell iDRAC10, versions 1.20.70.50 and 1.30.05.10, contains an Insufficiently Protected Credentials vulnerability. A race condition vulnerability exists that could allow an authenticated low‑privileged attacker to gain elevated access.
| Vendor | Product | Versions |
|---|---|---|
| dell | idrac10_firmware | 0 |
Downstream vendors/products affected by this vulnerability
| Vendor | Product | Source | Confidence |
|---|---|---|---|
| dell | integrated dell remote access | cert_advisory | 90% |
| dell | idrac10 | cve_cpe | 95% |
Updated severity to CRITICAL and changed exploit availability to false, marking the vulnerability as actively exploited.
Initial creation
