CVE-2025-27689 | THREATINT

Description

Dell iDRAC Tools, version(s) prior to 11.3.0.0, contain(s) an Improper Access Control vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Elevation of privileges.

Reserved 2025-03-05 | Published 2025-06-12 | Updated 2025-06-13 | Assigner dell

HIGH: 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-284: Improper Access Control

Product status

Default status

unaffected

Any version before 11.3.0.0

affected

Credits

Dell would like to thank “falconCorrup” for reporting this issue. finder

References

www.dell.com/...-update-for-dell-idrac-tools-vulnerabilities vendor-advisory

cve.org (CVE-2025-27689)

nvd.nist.gov (CVE-2025-27689)

Download JSON