Approved changes feed: RSS · Atom

cpe:2.3:a:dell:idrac_service_module_(ism):*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductIdrac Service Module (Ism) (a42bd2b6-8242-5683-9340-0ed41f16f915)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-38743 vulnerable 2026-06-08 07:23:06.388597 Details available
HIGH (7.8)
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution and Elevation of privileges.
Published: 2025-08-21T18:46:41.317Z
Updated: 2026-02-26T17:48:18.932Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-38742 vulnerable 2026-06-08 07:23:06.387167 Details available
MEDIUM (5.3)
Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Code execution.
Published: 2025-08-21T18:42:34.146Z
Updated: 2026-02-26T17:48:19.613Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38490 vulnerable 2026-06-08 06:41:47.335049 Details available
MEDIUM (5.8)
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
Published: 2024-08-01T07:19:25.493Z
Updated: 2024-08-01T18:59:51.674Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38489 vulnerable 2026-06-08 06:41:47.334575 Details available
LOW (3.1)
Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service (partial) event.
Published: 2024-08-01T07:15:25.948Z
Updated: 2024-08-01T13:20:25.876Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-38481 vulnerable 2026-06-08 06:41:47.243831 Details available
MEDIUM (4.8)
Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute arbitrary code potentially resulting in a denial of service event.
Published: 2024-08-01T07:23:56.257Z
Updated: 2024-08-01T18:59:55.991Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25948 vulnerable 2026-06-08 06:31:24.135252 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-25947 vulnerable 2026-06-08 06:31:24.133767 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-22428 vulnerable 2026-06-08 06:29:34.940257 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.