CVE-2025-26482

CVE-2025-26482

CVSS 4.9 MEDIUMEPSS 0.3%CWE-1258

In short

Dell PowerEdge Server BIOS and iDRAC9 leak sensitive information to attackers who have high-level remote access. This could expose confidential system details that compromise security.

Technical detail

An information disclosure vulnerability in Dell PowerEdge BIOS and iDRAC9 allows a high-privileged remote attacker to access confidential data through the management interface. The vulnerability requires elevated privileges and remote connectivity to the affected systems, potentially exposing sensitive configuration or operational information.

Summary generated and translated by AI from the official description.

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Affected products

Dell · Dell EMC NX440 Dell · Dell EMC Storage NX3240 Dell · Dell EMC Storage NX3340 Dell · Dell EMC XC Core 6420 System Dell · Dell EMC XC Core XC450 Dell · Dell EMC XC Core XC640 System Dell · Dell EMC XC Core XC650 Dell · Dell EMC XC Core XC6520 Dell · Dell EMC XC Core XC740xd2 Dell · Dell EMC XC Core XC740xd System Dell · Dell EMC XC Core XC750 Dell · Dell EMC XC Core XC750xa Dell · Dell EMC XC Core XC7525 Dell · Dell EMC XC Core XC940 System Dell · Dell EMC XC Core XCXR2 Dell · Dell XC Core XC660 Dell · Dell XC Core XC660xs Dell · Dell XC Core XC760 Dell · Dell XC Core XC760xa Dell · Dell XC Core XC7625 Dell · DSS 8440 Dell · iDRAC9 Dell · PowerEdge C4140 Dell · PowerEdge C6420 Dell · PowerEdge C6520 Dell · PowerEdge C6525 Dell · PowerEdge C6615 Dell · PowerEdge C6620 Dell · PowerEdge FC640 Dell · PowerEdge HS5610 Dell · PowerEdge HS5620 Dell · PowerEdge M640 Dell · PowerEdge M640 (for PE VRTX)Dell · PowerEdge MX740C Dell · PowerEdge MX750C Dell · PowerEdge MX760c Dell · PowerEdge MX840C Dell · PowerEdge R240 Dell · PowerEdge R250 Dell · PowerEdge R260 Dell · PowerEdge R340 Dell · PowerEdge R350 Dell · PowerEdge R360 Dell · PowerEdge R440 Dell · PowerEdge R450 Dell · PowerEdge R470 Dell · PowerEdge R540 Dell · PowerEdge R550 Dell · PowerEdge R570 Dell · PowerEdge R640 Dell · PowerEdge R6415 Dell · PowerEdge R650 Dell · PowerEdge R650XS Dell · PowerEdge R6515 Dell · PowerEdge R6525 Dell · PowerEdge R660 Dell · PowerEdge R660xs Dell · PowerEdge R6615 Dell · PowerEdge R6625 Dell · PowerEdge R670 Dell · PowerEdge R6715 Dell · PowerEdge R6725 Dell · PowerEdge R740 Dell · PowerEdge R740XD Dell · PowerEdge R740XD2 Dell · PowerEdge R7415 Dell · PowerEdge R7425 Dell · PowerEdge R750 Dell · PowerEdge R750XA Dell · PowerEdge R750XS Dell · PowerEdge R7515 Dell · PowerEdge R7525 Dell · PowerEdge R760 Dell · PowerEdge R760xa Dell · PowerEdge R760xd2 Dell · PowerEdge R760xs Dell · PowerEdge R7615 Dell · PowerEdge R7625 Dell · PowerEdge R770 Dell · PowerEdge R7715 Dell · PowerEdge R7725 Dell · PowerEdge R840 Dell · PowerEdge R860 Dell · PowerEdge R940 Dell · PowerEdge R940XA Dell · PowerEdge R960 Dell · PowerEdge T140 Dell · PowerEdge T150 Dell · PowerEdge T160 Dell · PowerEdge T340 Dell · PowerEdge T350 Dell · PowerEdge T360 Dell · PowerEdge T440 Dell · PowerEdge T550 Dell · PowerEdge T560 Dell · PowerEdge T640 Dell · PowerEdge XE2420 Dell · PowerEdge XE7420 Dell · PowerEdge XE7440 Dell · PowerEdge XE8545 Dell · PowerEdge XE8640 Dell · PowerEdge XE9640 Dell · PowerEdge XE9680 Dell · PowerEdge XE9680L Dell · PowerEdge XR11 Dell · PowerEdge XR12 Dell · PowerEdge XR2 Dell · PowerEdge XR4510c Dell · PowerEdge XR4520c Dell · PowerEdge XR5610 Dell · PowerEdge XR7620 Dell · PowerEdge XR8610t Dell · PowerEdge XR8620t

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://www.dell.com/support/kbdoc/en-us/000370138/dsa-2025-046-security-update-for-dell-poweredge-server-and-dell-idrac9-for-information-disclosure-vulnerability