CVE-2025-38742

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-38742
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 1.8 / Impact : 3.4

Attack Vector LOCAL

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact LOW

Availability Impact LOW

Scope UNCHANGED

References
Link Resource
https://www.dell.com/support/kbdoc/en-us/000359617/dsa-2025-311-security-update-for-dell-idrac-service-module-vulnerabilities Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:dell:emc_idrac_service_module:*:*:*:*:*:*:*:*
History

10 Sep 2025, 15:56

Type Values Removed Values Added
CPE cpe:2.3:a:dell:emc_idrac_service_module:*:*:*:*:*:*:*:*
First Time Dell
Dell emc Idrac Service Module
References () https://www.dell.com/support/kbdoc/en-us/000359617/dsa-2025-311-security-update-for-dell-idrac-service-module-vulnerabilities - () https://www.dell.com/support/kbdoc/en-us/000359617/dsa-2025-311-security-update-for-dell-idrac-service-module-vulnerabilities - Vendor Advisory

22 Aug 2025, 18:08

Type Values Removed Values Added
Summary
  • (es) Dell iDRAC Service Module (iSM), versiones anteriores a la 6.0.3.0, presenta una vulnerabilidad de asignación incorrecta de permisos para recursos críticos. Un atacante con pocos privilegios y acceso local podría explotar esta vulnerabilidad, lo que provocaría la ejecución de código.

21 Aug 2025, 19:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-21 19:15

Updated : 2025-09-10 15:56

NVD link : CVE-2025-38742

Mitre link : CVE-2025-38742

CVE.ORG link : CVE-2025-38742

JSON object : View

Products Affected

dell

  • emc_idrac_service_module
CWE
CWE-732

Incorrect Permission Assignment for Critical Resource