CVE-2024-25951: high-severity vulnerability in Dell Integrated Dell Remote Access Controller 8
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
21Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 8epss 0.8%
In short
An authenticated user can inject malicious commands into RACADM (a Dell remote management tool) to take control of the underlying operating system. This is dangerous because someone with login credentials can bypass normal security restrictions and run unauthorized commands.
Technical detail
RACADM contains a command injection vulnerability (CWE-1288) that allows authenticated users to execute arbitrary operating system commands. The attack requires valid authentication credentials and can result in complete system compromise with OS-level privileges.
Summary generated and translated by AI from the official description.
A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
Dell · Integrated Dell Remote Access Controller 8Related CVEs — Dell Integrated Dell Remote Access Controller 8
In the same product, most dangerous first.