CVE-2025-26482

CVE-2025-26482

CVSS 4.9 MEDIUMEPSS 0.3%CWE-1258

Em resumo

O BIOS do Dell PowerEdge e o iDRAC9 vazam informações sensíveis para atacantes com acesso remoto de alto privilégio. Isso pode expor detalhes confidenciais do sistema que comprometem a segurança.

Detalhe técnico

Uma vulnerabilidade de divulgação de informações no BIOS do Dell PowerEdge e no iDRAC9 permite que um atacante remoto com privilégios elevados acesse dados confidenciais através da interface de gerenciamento. A vulnerabilidade requer privilégios elevados e conectividade remota aos sistemas afetados, podendo expor informações sensíveis de configuração ou operação.

Resumo gerado e traduzido por IA a partir da descrição oficial.

Dell PowerEdge Server BIOS and Dell iDRAC9, all versions, contains an Information Disclosure vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Information Disclosure.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Produtos afetados

Dell · Dell EMC NX440 Dell · Dell EMC Storage NX3240 Dell · Dell EMC Storage NX3340 Dell · Dell EMC XC Core 6420 System Dell · Dell EMC XC Core XC450 Dell · Dell EMC XC Core XC640 System Dell · Dell EMC XC Core XC650 Dell · Dell EMC XC Core XC6520 Dell · Dell EMC XC Core XC740xd2 Dell · Dell EMC XC Core XC740xd System Dell · Dell EMC XC Core XC750 Dell · Dell EMC XC Core XC750xa Dell · Dell EMC XC Core XC7525 Dell · Dell EMC XC Core XC940 System Dell · Dell EMC XC Core XCXR2 Dell · Dell XC Core XC660 Dell · Dell XC Core XC660xs Dell · Dell XC Core XC760 Dell · Dell XC Core XC760xa Dell · Dell XC Core XC7625 Dell · DSS 8440 Dell · iDRAC9 Dell · PowerEdge C4140 Dell · PowerEdge C6420 Dell · PowerEdge C6520 Dell · PowerEdge C6525 Dell · PowerEdge C6615 Dell · PowerEdge C6620 Dell · PowerEdge FC640 Dell · PowerEdge HS5610 Dell · PowerEdge HS5620 Dell · PowerEdge M640 Dell · PowerEdge M640 (for PE VRTX)Dell · PowerEdge MX740C Dell · PowerEdge MX750C Dell · PowerEdge MX760c Dell · PowerEdge MX840C Dell · PowerEdge R240 Dell · PowerEdge R250 Dell · PowerEdge R260 Dell · PowerEdge R340 Dell · PowerEdge R350 Dell · PowerEdge R360 Dell · PowerEdge R440 Dell · PowerEdge R450 Dell · PowerEdge R470 Dell · PowerEdge R540 Dell · PowerEdge R550 Dell · PowerEdge R570 Dell · PowerEdge R640 Dell · PowerEdge R6415 Dell · PowerEdge R650 Dell · PowerEdge R650XS Dell · PowerEdge R6515 Dell · PowerEdge R6525 Dell · PowerEdge R660 Dell · PowerEdge R660xs Dell · PowerEdge R6615 Dell · PowerEdge R6625 Dell · PowerEdge R670 Dell · PowerEdge R6715 Dell · PowerEdge R6725 Dell · PowerEdge R740 Dell · PowerEdge R740XD Dell · PowerEdge R740XD2 Dell · PowerEdge R7415 Dell · PowerEdge R7425 Dell · PowerEdge R750 Dell · PowerEdge R750XA Dell · PowerEdge R750XS Dell · PowerEdge R7515 Dell · PowerEdge R7525 Dell · PowerEdge R760 Dell · PowerEdge R760xa Dell · PowerEdge R760xd2 Dell · PowerEdge R760xs Dell · PowerEdge R7615 Dell · PowerEdge R7625 Dell · PowerEdge R770 Dell · PowerEdge R7715 Dell · PowerEdge R7725 Dell · PowerEdge R840 Dell · PowerEdge R860 Dell · PowerEdge R940 Dell · PowerEdge R940XA Dell · PowerEdge R960 Dell · PowerEdge T140 Dell · PowerEdge T150 Dell · PowerEdge T160 Dell · PowerEdge T340 Dell · PowerEdge T350 Dell · PowerEdge T360 Dell · PowerEdge T440 Dell · PowerEdge T550 Dell · PowerEdge T560 Dell · PowerEdge T640 Dell · PowerEdge XE2420 Dell · PowerEdge XE7420 Dell · PowerEdge XE7440 Dell · PowerEdge XE8545 Dell · PowerEdge XE8640 Dell · PowerEdge XE9640 Dell · PowerEdge XE9680 Dell · PowerEdge XE9680L Dell · PowerEdge XR11 Dell · PowerEdge XR12 Dell · PowerEdge XR2 Dell · PowerEdge XR4510c Dell · PowerEdge XR4520c Dell · PowerEdge XR5610 Dell · PowerEdge XR7620 Dell · PowerEdge XR8610t Dell · PowerEdge XR8620t

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://www.dell.com/support/kbdoc/en-us/000370138/dsa-2025-046-security-update-for-dell-poweredge-server-and-dell-idrac9-for-information-disclosure-vulnerability