Dell Emc Idrac Service Module — known CVE vulnerabilities

Every CVE whose affected-product data names Dell Emc Idrac Service Module, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2025-38743 — CVSS 7.8 (high): Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains a Buffer Access with Incorrect Length Value vulnerability. A low…
• CVE-2024-22428 — CVSS 7.0 (high): Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local…
• CVE-2018-11053 — CVSS 6.5 (medium): Dell EMC iDRAC Service Module for all supported Linux and XenServer versions v3.0.1, v3.0.2, v3.1.0, v3.2.0, when started, changes the…
• CVE-2024-38490 — CVSS 5.8 (medium): Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute…
• CVE-2025-38742 — CVSS 5.3 (medium): Dell iDRAC Service Module (iSM), versions prior to 6.0.3.0, contains an Incorrect Permission Assignment for Critical Resource…
• CVE-2024-25948 — CVSS 4.8 (medium): Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Write Vulnerability. A privileged local attacker could execute…
• CVE-2024-38481 — CVSS 4.8 (medium): Dell iDRAC Service Module version 5.3.0.0 and prior, contain a Out of bound Read Vulnerability. A privileged local attacker could execute…
• CVE-2024-25947 — CVSS 4.8 (medium): Dell iDRAC Service Module version 5.3.0.0 and prior, contain an Out of bound Read Vulnerability. A privileged local attacker could execute…
• CVE-2024-38489 — CVSS 3.1 (low): Dell iDRAC Service Module version 5.3.0.0 and prior contains Out of bound write Vulnerability. A privileged local attacker could execute…