CVE-2025-22397: Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell…

PriorityP431medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.39%

30.3th percentile

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
dell	idrac10_firmware	< 1.20.25.00	1.20.25.00
dell	idrac9_firmware	>= 6.10.80.00 < 7.00.00.181	7.00.00.181
dell	idrac9_firmware	>= 7.00.00.183 < 7.20.10.50	7.20.10.50
dell	integrated_dell_remote_access_controller_10_17g_version	>= N/A < 1.20.25.00	1.20.25.00
dell	integrated_dell_remote_access_controller_9_14g_versions	>= N/A < 7.00.00.181	7.00.00.181
dell	integrated_dell_remote_access_controller_9_15g_and_16g_versions	>= 6.10.80.00 < 7.20.10.50	7.20.10.50

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.