CVE-2022-34435

Name of the Vulnerable Software and Affected Versions Dell iDRAC9 versions 6.00.02.00 and prior

Description The issue is related to an improper input validation in Racadm when the firmware lock-down configuration is set. A remote high privileged attacker could exploit this to bypass the firmware lock-down configuration and perform a firmware update.

Recommendations For Dell iDRAC9 versions 6.00.02.00 and prior, consider disabling the Racadm functionality until a patch is available to prevent exploitation. Restrict access to the firmware update mechanism to minimize the risk of unauthorized updates.