CVE-2025-26482

CVE-2025-26482

CVSS 4.9 MEDIUMEPSS 0.3%CWE-1258

En resumen

El BIOS de Dell PowerEdge e iDRAC9 filtran información sensible a atacantes con acceso remoto de alto privilegio. Esto puede exponer detalles confidenciales del sistema que comprometen la seguridad.

Detalle técnico

Una vulnerabilidad de divulgación de información en el BIOS de Dell PowerEdge e iDRAC9 permite que un atacante remoto con privilegios elevados acceda a datos confidenciales a través de la interfaz de administración. La vulnerabilidad requiere privilegios elevados y conectividad remota a los sistemas afectados, exponiendo potencialmente información confidencial de configuración u operación.

Resumen generado y traducido por IA a partir de la descripción oficial.

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Productos afectados

Dell · Dell EMC NX440 Dell · Dell EMC Storage NX3240 Dell · Dell EMC Storage NX3340 Dell · Dell EMC XC Core 6420 System Dell · Dell EMC XC Core XC450 Dell · Dell EMC XC Core XC640 System Dell · Dell EMC XC Core XC650 Dell · Dell EMC XC Core XC6520 Dell · Dell EMC XC Core XC740xd2 Dell · Dell EMC XC Core XC740xd System Dell · Dell EMC XC Core XC750 Dell · Dell EMC XC Core XC750xa Dell · Dell EMC XC Core XC7525 Dell · Dell EMC XC Core XC940 System Dell · Dell EMC XC Core XCXR2 Dell · Dell XC Core XC660 Dell · Dell XC Core XC660xs Dell · Dell XC Core XC760 Dell · Dell XC Core XC760xa Dell · Dell XC Core XC7625 Dell · DSS 8440 Dell · iDRAC9 Dell · PowerEdge C4140 Dell · PowerEdge C6420 Dell · PowerEdge C6520 Dell · PowerEdge C6525 Dell · PowerEdge C6615 Dell · PowerEdge C6620 Dell · PowerEdge FC640 Dell · PowerEdge HS5610 Dell · PowerEdge HS5620 Dell · PowerEdge M640 Dell · PowerEdge M640 (for PE VRTX)Dell · PowerEdge MX740C Dell · PowerEdge MX750C Dell · PowerEdge MX760c Dell · PowerEdge MX840C Dell · PowerEdge R240 Dell · PowerEdge R250 Dell · PowerEdge R260 Dell · PowerEdge R340 Dell · PowerEdge R350 Dell · PowerEdge R360 Dell · PowerEdge R440 Dell · PowerEdge R450 Dell · PowerEdge R470 Dell · PowerEdge R540 Dell · PowerEdge R550 Dell · PowerEdge R570 Dell · PowerEdge R640 Dell · PowerEdge R6415 Dell · PowerEdge R650 Dell · PowerEdge R650XS Dell · PowerEdge R6515 Dell · PowerEdge R6525 Dell · PowerEdge R660 Dell · PowerEdge R660xs Dell · PowerEdge R6615 Dell · PowerEdge R6625 Dell · PowerEdge R670 Dell · PowerEdge R6715 Dell · PowerEdge R6725 Dell · PowerEdge R740 Dell · PowerEdge R740XD Dell · PowerEdge R740XD2 Dell · PowerEdge R7415 Dell · PowerEdge R7425 Dell · PowerEdge R750 Dell · PowerEdge R750XA Dell · PowerEdge R750XS Dell · PowerEdge R7515 Dell · PowerEdge R7525 Dell · PowerEdge R760 Dell · PowerEdge R760xa Dell · PowerEdge R760xd2 Dell · PowerEdge R760xs Dell · PowerEdge R7615 Dell · PowerEdge R7625 Dell · PowerEdge R770 Dell · PowerEdge R7715 Dell · PowerEdge R7725 Dell · PowerEdge R840 Dell · PowerEdge R860 Dell · PowerEdge R940 Dell · PowerEdge R940XA Dell · PowerEdge R960 Dell · PowerEdge T140 Dell · PowerEdge T150 Dell · PowerEdge T160 Dell · PowerEdge T340 Dell · PowerEdge T350 Dell · PowerEdge T360 Dell · PowerEdge T440 Dell · PowerEdge T550 Dell · PowerEdge T560 Dell · PowerEdge T640 Dell · PowerEdge XE2420 Dell · PowerEdge XE7420 Dell · PowerEdge XE7440 Dell · PowerEdge XE8545 Dell · PowerEdge XE8640 Dell · PowerEdge XE9640 Dell · PowerEdge XE9680 Dell · PowerEdge XE9680L Dell · PowerEdge XR11 Dell · PowerEdge XR12 Dell · PowerEdge XR2 Dell · PowerEdge XR4510c Dell · PowerEdge XR4520c Dell · PowerEdge XR5610 Dell · PowerEdge XR7620 Dell · PowerEdge XR8610t Dell · PowerEdge XR8620t

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://www.dell.com/support/kbdoc/en-us/000370138/dsa-2025-046-security-update-for-dell-poweredge-server-and-dell-idrac9-for-information-disclosure-vulnerability