CVE-2025-22397 Path traversal in Integrated Dell Remote Access Controller 10 17G version
A high-privileged remote attacker can exploit a path traversal flaw in Dell iDRAC to gain unauthorized access to restricted directories.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-22397?
CVE-2025-22397 is a medium-severity path traversal vulnerability in Integrated Dell Remote Access Controller 10 17G version, published on 6 Nov 2025. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
Weakness: CWE-22
Which versions are affected by CVE-2025-22397?
It affects 2 products.
Products include Dell Idrac10 Firmware, Dell Idrac9 Firmware.
How do I fix CVE-2025-22397?
No fix has been published for CVE-2025-22397 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2025-22397 being exploited?
There is no known exploitation of CVE-2025-22397 in the wild and no public exploit code.
Other vulnerabilities in Integrated Dell Remote Access Controller 10 17G version
Sources
Also known as GHSA-95fw-x52j-jfx5.