CVE-2020-5366: Dell IDRAC9 Firmware

Medium severity, CVSS 6.5. EPSS: 1.8% chance of exploitation in the next 30 days.

Dell EMC iDRAC9 versions prior to 4.20.20.20 contain a Path Traversal Vulnerability. A remote authenticated malicious user with low privileges could potentially exploit this vulnerability by manipulating input parameters to gain unauthorized read access to the arbitrary files.

Affected products

• Dell IDRAC9 Firmware: before 4.20.20.20 (fixed in 4.20.20.20)

Published 2020-07-09. Last modified 2026-06-17.