Authenticated remote code execution in iDRAC 6

Vulnerability

The web-based diagnostics console in Dell EMC iDRAC6 contains a command injection vulnerability. Affected versions: Monolithic versions prior to 2.91 and all Modular versions. The vulnerability exists in the diagnostics console, which is accessible to authenticated iDRAC users.

Exploitation

An attacker with valid iDRAC credentials can access the diagnostics console and inject arbitrary commands via crafted input. No additional privileges or user interaction beyond authentication are required.

Impact

Successful exploitation allows the attacker to execute arbitrary commands as root on the affected iDRAC system, leading to full compromise of the iDRAC and potential further attacks on the host server.

Mitigation

Dell EMC released iDRAC6 Monolithic version 2.91 to address this vulnerability. For Modular versions, no fix is available; users should restrict access to the diagnostics console and apply network segmentation to limit exposure.