Description

Dell iDRAC9, 14G versions prior to 7.00.00.182 and 15G/16G versions prior to 7.20.30.50, contains an Improper Access Control vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to gaining access to unauthorized data.

Executive Summary

Technical Details

Mitigations

References

Additional Metadata

{
  "score": "5.9",
  "pubDate": "2026-08-26T19:17:19.213Z",
  "pubdate": "2026-08-26T19:17:19.213Z",
  "executiveSummary": "Dell iDRAC9 contains an improper access control vulnerability that enables unauthorized data access.\nThis vulnerability stems from insufficient validation of access controls, allowing remote, unauthenticated attackers to potentially bypass security mechanisms.\nThe vulnerability affects Dell iDRAC9 14G systems running firmware versions prior to 7.00.00.182, and 15G/16G systems running firmware versions prior to 7.20.30.50.\nThe primary risk implication is the potential for information disclosure, where an attacker can access sensitive or unauthorized data within the iDRAC environment without needing valid credentials.\nSuccessful exploitation allows an unauthenticated remote attacker to compromise the confidentiality of the affected management controller, potentially leading to the leakage of system configuration details, sensitive metrics, or other stored data.\nRemediation requires upgrading the affected iDRAC9 firmware to the specified secure versions or higher to resolve the underlying access control logic error.",
  "technicalDetails": "The vulnerability is identified as an Improper Access Control issue within the Dell iDRAC9 (Integrated Dell Remote Access Controller) firmware ecosystem. It resides within the management interface's request handling logic, where security checks intended to gatekeep sensitive data are either improperly enforced or entirely bypassed under specific conditions.\nThe vulnerability affects the following firmware baselines: 14G versions prior to 7.00.00.182, and 15G/16G versions prior to 7.20.30.50. The flaw is located in the firmware component responsible for processing web-based or API-driven requests directed at the iDRAC management interface.\nExploitation occurs when an unauthenticated remote attacker directs specifically crafted requests to the iDRAC web interface. The root cause is a breakdown in the authentication and authorization middleware that typically verifies the session state or identity of the requester before fulfilling data retrieval requests. Instead of rejecting the unauthenticated request with a 401 Unauthorized or 403 Forbidden response, the internal application logic erroneously treats the request as authorized, allowing the system to serve restricted data back to the attacker.\nThe attack flow follows a direct vector: 1. The attacker establishes a network connection to the iDRAC management interface over standard protocols (HTTP/HTTPS). 2. The attacker submits a specially crafted request that bypasses standard entry-point authentication filters. 3. Due to the improper access control logic, the vulnerable component fails to validate that the request originated from an authenticated session. 4. The system retrieves the requested unauthorized data from internal memory or configuration stores. 5. The data is serialized and returned in the HTTP response body, completing the unauthorized access attempt.\nBecause iDRAC operates at the baseboard management controller level, it possesses high-level visibility into system parameters, hardware configurations, and, depending on the implementation, diagnostic logs. An unauthenticated attacker leveraging this vulnerability can perform information reconnaissance without leaving standard authentication logs, complicating incident detection. The post-exploitation impact includes the potential discovery of sensitive metadata, system environment variables, or other information stored within the controller's address space that is intended to be protected by authentication gates."
}