CVE-2025-22397
Medium
Description
Dell Integrated Dell Remote Access Controller 9, 14G versions prior to 7.00.00.181, 15G and 16G versions 6.10.80.00 through 7.20.10.50 and Dell Integrated Dell Remote Access Controller 10, 17G versions prior to 1.20.25.00, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability. A high privileged attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access.
SeverityMedium
CVSS6.7
Exploit probability—
ProductDell Idrac9 Firmware
PublishedNov 6, 2025
First seenNov 6, 2025
Weakness typeCWE-22Path traversal
How to fix
Update
- dell idrac9_firmware7.00.00.181, 7.20.10.50 or later
- dell idrac10_firmware1.20.25.00 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| dell idrac9_firmware | 6.10.80.00 ≤ v < 7.00.00.181, 7.00.00.183 ≤ v < 7.20.10.50 | 7.00.00.181, 7.20.10.50 |
| dell idrac10_firmware | v < 1.20.25.00 | 1.20.25.00 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.