Dell Emc Idrac Service Module vulnerabilities

9 CVEs affecting Dell Emc Idrac Service Module, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-38743, published 2025-08-21.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-11053, published 2018-06-26. Medium severity, CVSS 6.5. EPSS: 0.5% chance of exploitation in the next 30 days. Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the default file permission of the hosts file of the host operating…
• CVE-2024-38489, published 2024-08-01. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service…
• CVE-2024-22428, published 2024-01-16. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary…
• CVE-2024-38490, published 2024-08-01. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service…
• CVE-2024-38481, published 2024-08-01. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service…
• CVE-2024-25948, published 2024-08-01. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service…
• CVE-2024-25947, published 2024-08-01. Medium severity, CVSS 4.4. EPSS: 0.2% chance of exploitation in the next 30 days. Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service…
• CVE-2025-38743, published 2025-08-21. High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days. Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit…
• CVE-2025-38742, published 2025-08-21. Medium severity, CVSS 5.3. EPSS: 0.1% chance of exploitation in the next 30 days. Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could…