CVE-2024-25951

Summary

A command injection vulnerability exists in local RACADM. A malicious authenticated user could gain control of the underlying operating system.

Affected Software

VendorProductVersion RangeStatus
DellIntegrated Dell Remote Access Controller 8N/A < 2.85.85.85affected

Weaknesses

  • CWE-1288: CWE-1288: Improper Validation of Consistency within Input

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References