Skip to content
CVE PROGRAM SOURCE RECORD2.7 Low

CVE-2022-34436

CVE-2022-34436

Description

Dell iDRAC8 version 2.83.83.83 and prior contain an improper input validation vulnerability in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this vulnerability to bypass the firmware lock-down configuration and perform a firmware update.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell Integrated Dell Remote Access Controller 8

Default version status: unaffected

  • 0 to ≤ 2.83.83.83affected

References