CVE-2024-22428 Privilege escalation in iDRAC Service Module (iSM)
A local unprivileged user can escalate privileges and execute arbitrary code due to incorrect default permissions in Dell iDRAC Service Module.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-22428?
CVE-2024-22428 is a high-severity vulnerability in Dell iDRAC Service Module (iSM), published on 16 Jan 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Dell iDRAC Service Module, versions 5.2.0.0 and prior, contain an Incorrect Default Permissions vulnerability. It may allow a local unprivileged user to escalate privileges and execute arbitrary code on the affected system. Dell recommends customers upgrade at the earliest opportunity.
Weakness: CWE-276
Which versions are affected by CVE-2024-22428?
It affects 1 product.
Products include Dell Emc Idrac Service Module.
How do I fix CVE-2024-22428?
No fix has been published for CVE-2024-22428 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-22428 being exploited?
There is no known exploitation of CVE-2024-22428 in the wild and no public exploit code.
Other vulnerabilities in Dell iDRAC Service Module (iSM)
- CVE-2025-38743 Memory corruption in iDRAC Service Module (iSM)
- CVE-2018-11053 iSM: Dell EMC iDRAC Service Module Improper File Permission Vulnerability
- CVE-2024-38490 Memory corruption in iDRAC Service Module (iSM)
- CVE-2025-38742 Privilege escalation in iDRAC Service Module (iSM)
- CVE-2024-25947 Memory corruption in iDRAC Service Module (iSM)
Sources
Also known as GHSA-j9wq-qf2q-26rp.