CVE-2025-22397— Dell iDRAC9和Dell iDRAC10 路径遍历漏洞

N/A

Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:H

对路径名的限制不恰当(路径遍历)

Dell iDRAC9和Dell iDRAC10 路径遍历漏洞

Dell iDRAC9和Dell iDRAC10都是美国戴尔（Dell）公司的产品。Dell iDRAC9是提供提供整个的PowerEdge系列服务器全面，嵌入式管理，自动化功能。一个控制器。Dell iDRAC10是一款集成远程访问控制器。 Dell iDRAC9和Dell iDRAC10存在路径遍历漏洞，该漏洞源于路径限制不当，可能导致未经授权的访问。

N/A

N/A