CVE-2022-24422: Dell IDRAC9

Critical severity, CVSS 9.8. EPSS: 58.5% chance of exploitation in the next 30 days.

Dell iDRAC9 versions 5.00.00.00 and later but prior to 5.10.10.00, contain an improper authentication vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to gain access to the VNC Console.

Affected products

• Dell IDRAC9: from 5.00.00.00, before 5.10.10.00 (fixed in 5.10.10.00)

Published 2022-05-26. Last modified 2026-06-17.